Viewing File: /var/cache/yum/x86_64/7/updates/gen/other_db.sqlite
SQLite format 3 @ O
-)
M2 @ YindexpkgIdpackagesM.CREATE INDEX pkgId ON packages (pkgId)K eindexkeychangechangelogJCREATE INDEX keychange ON changelog (pkgKey) / triggerremove_changelogspackagesCREATE TRIGGER remove_changelogs AFTER DELETE ON packages BEGIN DELETE FROM changelog WHERE pkgKey = old.pkgKey; ENDv ;tablechangelogchangelogCREATE TABLE changelog ( pkgKey INTEGER, author TEXT, date INTEGER, changelog TEXT)^ tablepackagespackagesCREATE TABLE packages ( pkgKey INTEGER PRIMARY KEY, pkgId TEXT)Q{tabledb_infodb_infoCREATE TABLE db_info (dbversion INTEGER, checksum TEXT)
E
e075c2b40e525d4aa752b17e8fbb11f11068a185fa08d55c4fe9ebf0db3508ef = '
֗x
ՋF 7 7 plicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561"
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments
8 ; 8 oCMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew oMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV testsb o[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^@- Bump version to 1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS: o Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5Re
5l D o Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped charsF o#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterH o'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
B
q!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load oSMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server oKMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication
` Go#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterI
o'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions oCMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew oMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests
x 8 x oSMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the serveroKMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationEo Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars
m va m oCMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skewXoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12o9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DNq!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load
4j Eo Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped charsGo#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterIo'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
@ q!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load oSMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the serveroKMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication
u u oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12 o9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN
4j E!o Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped charsG o#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterI o'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
@ $q!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load #oSMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server"oKMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication
u u 'oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX&oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12%o9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN
) ) E*o Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped charsG)o#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterB(oThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)
@ -q!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load ,oSMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server+oKMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication
u u 0oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX/oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12.o9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN
2o?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent searchB1oThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)
x 8 x 5oSMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server4oKMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationE3o Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars
va X8oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-127o9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN6q!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load
B:oThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)9oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
o<osThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database;o?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
@ ?q!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load >oSMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server=oKMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication
u u BoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleXAoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12@o9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN
Do?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent searchBCoThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)
\ \ :Go Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-5^=Q@- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)rFqwMark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_reploEosThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database
j ;Jo Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5Re -IooMark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\A- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)cHo[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\@- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search plicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561"
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments
. . INo'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissionsMoCMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skewLoMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV testscKo[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^@- Bump version to 1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS
n 6n EPo Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped charsGOo#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter
j ;So Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5Re #-Roo Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\A- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)cQo[ Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\@- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search plicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561"
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments
. . IWo' Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissionsVoC Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skewUo Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV testscTo[ Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^@- Bump version to 1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS
P 6n P ZoK Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationEYo Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped charsGXo# Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter
P$ ^o
Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV testsc]o[
Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^@- Bump version to 1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS;\o
Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5Re '-[oo
Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\@- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561"
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments
f Gao#
Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterI`o'
Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions_oC
Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew
x 8 x doS
Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-8
- Resolves: Bug 1905450 - Internal unindexed search crashes the servercoK
Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationEbo
Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars
e ^ e XhoG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12go9 Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DNfq! Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load eoS Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server
Bjo Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)ioG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
olos Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the databaseko? Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
= = oq! Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high loadAno Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU usermqw Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl
u u roG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleXqoG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12po9 Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN
to? Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent searchBso Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)
rvqw Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_replouos Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database
XzoG
Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12yo9
Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DNxoG Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version stringAwo Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use
B|o
Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular){oG
Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
o~os
Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database}o?
Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
6 ) 6 XoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12o=
Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d@- Bump version to 1.3.11.1-3
- Resolves: rhbz#2224507 - Paged search impacts performanceoG
Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version stringA o
Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU userqw
Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl
BoThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
oosThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the databaseo?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
( o=Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d@- Bump version to 1.3.11.1-3
- Resolves: rhbz#2224507 - Paged search impacts performance
oGMark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version stringA oSimon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU userqwMark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl
I fI
oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule mCThierry Bordaz <tbordaz@redhat.com> - 1.3.11.1-4ey- Bump version to 1.3.11.1-4
- Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetype
, t.\D r , D
a746522986b0afca052c56bfe30e019392742f4feb4722768d2eb43b4babeac8D
231493e830d00be6017e14f2838a22163835ecea8facf688b9769eed88f3c9b2D
d3229cfb18563fc8a24139a13a8b266e417258f43d36a4a4ac3b372af35d59f8D
187145d7bfd310c612f73b86a31e75562cbe69306dca7362841fcb038b52fa3bD
2952ebf67510a8da5c648a66cb72fb82d02a871b1b805e3fa5d9a1ab8d1377d2D
6af757b1f83a00f0551ab69c27a637b1a7fcd95125d64c9146be9158ec4964c4D
69b46c2053c4fbaa163f2390003a89acba1e45f20c75c06337f18474970f4943D
8185f310e186803f0af31262808f321254090fced72ee96c77a5b4ecea2ab08cD
5d1951ec0080791e7902a50f19ea2eab2f07b5ce3efea78f024eb1a197abfb77D
a4b372b0da7c95c62540dcfd5049d2b4cd05abf59cb373d2a9a94bcdce3472c3D
8638584ccb7fcde8b4799f13f6a58ef2c129baba95c41aeb504453c5262416a1D
25d8cb3d83565ead22c4bfc3963acaa10f44a28286e88bfd60ce16ec510a113bD
47174964aa424317b7623852dab6eb134838bc81b1ecc6687a16e8461523c3c8D
a6a35e6ed55e101d96fd0ed48dd8267a7e8e10917230172a9de28a796d39490e
, t.\D r , D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?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent searchBoThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)
rqwMark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_reploosThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database
mCThierry Bordaz <tbordaz@redhat.com> - 1.3.11.1-4ey- Bump version to 1.3.11.1-4
- Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetypeo=Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d@- Bump version to 1.3.11.1-3
- Resolves: rhbz#2224507 - Paged search impacts performanceoGMark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version stringAoSimon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use
oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleMm1James Chapman <jachapma@redhat.com> - 1.3.11.1-5f(@- Bump version to 1.3.11.1-5
- Resolves: RHEL-33337 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request
- Resolves: RHEL-34817 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c
o?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent searchBoThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)
rqwMark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_reploosThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database
mCThierry Bordaz <tbordaz@redhat.com> - 1.3.11.1-4ey- Bump version to 1.3.11.1-4
- Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetype o=Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d@- Bump version to 1.3.11.1-3
- Resolves: rhbz#2224507 - Paged search impacts performance oGMark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version stringA oSimon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use
c"o[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^@- Bump version to 1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS;!o Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5Re CM m1James Chapman <jachapma@redhat.com> - 1.3.11.1-5f(@- Bump version to 1.3.11.1-5
- Resolves: RHEL-33337 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request
- Resolves: RHEL-34817 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c plicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561"
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments
^ G&o#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterI%o'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions$oCMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew#oMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests
u 7 u )oSMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server(oKMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationE'o Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars
un ,oCMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew+oMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests*q!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load
3h E/o Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped charsG.o#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterI-o'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
> 2q!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load 1oSMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server0oKMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication
\ ' \ G7o#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterI6o'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions5oCMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skewX4oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-123o9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN
u 7 u :oSMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server9oKMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationE8o Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars
u_ X=oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12<o9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN;q!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load
K K G@o#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterI?o'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions>oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
u 7 u CoSMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the serverBoKMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationEAo Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars
u_ XFoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12Eo9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DNDq!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load
BHoThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)GoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
M 5l M KoKMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationEJo Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped charsGIo#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter
a ] a XOoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12No9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DNMq!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load LoSMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server
BQoThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)PoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
ESo Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped charsRo?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
> Vq!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load UoSMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the serverToKMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication
r r YoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleXXoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12Wo9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN
[o?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent searchBZoThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)
K
K ^oSMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server]oKMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationo\osThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database
u_ XaoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12`o9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN_q!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load
BcoThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)boGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
oeosThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the databasedo?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
e
L e cho[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\@- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search:go Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-5^=Q@- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)rfqwMark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl
O! loMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV testscko[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^@- Bump version to 1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS;jo Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5Re ]-iooMark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\A- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561"
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments
e Goo#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterIno'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissionsmoCMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew
P 7 P cqo[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\@- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base searchEpo Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars
O! uoMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV testscto[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^@- Bump version to 1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS;so Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5Re a-rooMark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\A- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561"
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments
e Gxo#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterIwo'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissionsvoCMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew
g 7 g -{ooMark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\@- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)zoKMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationEyo Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars plicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561"
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments
0 9 0 oCMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew~oMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV testsc}o[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^@- Bump version to 1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS;|o Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5Re d
3h Eo Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped charsGo#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterI o'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
> q!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load oSMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server oSMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-8
- Resolves: Bug 1905450 - Internal unindexed search crashes the serveroKMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication
r r oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleXoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12o9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN
o?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent searchB
oThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)
r
qwMark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_replo osThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database
0 o9 Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DNq! Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high loadAoSimon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use
B B Bo Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)oG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleXoG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12
oos Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the databaseo? Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
( o9 Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DNoG Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version stringAo Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU userqw Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl
, t.\D r , D*
bff0a6adc60eba913218bcccc836d732221469cd7650eb27d199e3f7780373a7D)
29d3baca7632def182f6a6250f76f26476b491b66dfe819eb6d94008003dfc3dD(
f9a690e8aa496786b4e27818af37b20bb17b3805bd626de662a2647c04ea6bb1D'
808bc13d124b864d8dd90f80437bc5d919d6dcdca1ebbd9efcd56e575fbfb500D&
b957705e340403c636b68ab6ee9c49dd1552eb20220d0175dbbf84f042ac62c4D%
210a76b6e2c83684ac3c106fff35849b22269be89a5b895625ac4ca5bf489796D$
9e9a8ce7cbf019108675746a5f67d8ff853fb0b97c72cbd0f4d38b6dad0c96b7D#
ca73e4d1c2e57869c6e300075fa3bdd65118ee30910c0ed450532b3fd0d7976bD"
c10b86b4a5c3b1385c04eab748fa24507011e241349fb530ab4df3fbb719f26eD!
bb1ab36dd4c499189f1a463cc83793aa1e996879aa0fc39e43580add7837b7c9D
cf900656ad664e99d27fd815261164678b178f186d6fbadf440dbc7ab48fbbfeD
0f6b2d20fc79acfdc5f930788c81abbec7863d8a4d373229f80a9f4d126d1db8D
aa0fe451ab8753df55722f121169c9aca26ca19a8b763c4d7f831af3bf826a26D
e5c8dac0c01ec10e911180046ed350bf3dafcb9bd06121d746055d20b4d55586
B B B o Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)oG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleXoG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12
o os Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database o? Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
5
( 5 X#oG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12"o= Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d@- Bump version to 1.3.11.1-3
- Resolves: rhbz#2224507 - Paged search impacts performance!oG Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version stringA o Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU user qw Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl
B%o Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)$oG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
o'os Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database&o? Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
( +o= Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d@- Bump version to 1.3.11.1-3
- Resolves: rhbz#2224507 - Paged search impacts performance*oG Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version stringA)o Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU user(qw Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl
I fI -oG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule,mC Thierry Bordaz <tbordaz@redhat.com> - 1.3.11.1-4ey- Bump version to 1.3.11.1-4
- Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetype
/o? Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent searchB.o Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)
r1qw Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_replo0os Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database
5mC Thierry Bordaz <tbordaz@redhat.com> - 1.3.11.1-4ey- Bump version to 1.3.11.1-4
- Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetype4o= Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d@- Bump version to 1.3.11.1-3
- Resolves: rhbz#2224507 - Paged search impacts performance3oG Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version stringA2o Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use
c8o[ Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^@- Bump version to 1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS;7o Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5Re {M6m1 James Chapman <jachapma@redhat.com> - 1.3.11.1-5f(@- Bump version to 1.3.11.1-5
- Resolves: RHEL-33337 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request
- Resolves: RHEL-34817 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c plicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561"
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments
^ G<o# Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterI;o' Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions:oC Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew9o Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests
u 7 u ?oS Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server>oK Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationE=o Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars
un BoC!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skewAo!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests@q! Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load
3h EEo !Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped charsGDo#!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterICo'!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
> Hq!!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load GoS!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the serverFoK!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication
\ ' \ GMo#"Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterILo'"Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissionsKoC"Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skewXJoG!Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12Io9!Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN
u 7 u PoS"Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the serverOoK"Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationENo "Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars
u_ XSoG"Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12Ro9"Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DNQq!"Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load
K K GVo##Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterIUo'#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissionsToG"Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
u 7 u YoS#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the serverXoK#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationEWo #Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars
u_ X\oG#Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12[o9#Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DNZq!#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load
B^o#Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)]oG#Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
M 5l M aoK$Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationE`o $Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped charsG_o#$Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter
a ] a XeoG$Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12do9$Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DNcq!$Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load boS$Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server
Bgo$Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)foG$Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
Eio %Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped charsho?$Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
> lq!%Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load koS%Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the serverjoK%Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication
r r ooG%Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleXnoG%Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12mo9%Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN
qo?%Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent searchBpo%Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)
K
K toS&Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the serversoK&Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationoros%Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database
u_ XwoG&Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12vo9&Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DNuq!&Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load
Byo&Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)xoG&Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
o{os&Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the databasezo?&Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
e
L e c~o['Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\@- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search:}o 'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-5^=Q@- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)r|qw&Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl
O! o'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV testsco['Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^@- Bump version to 1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS; o 'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5Re -oo'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\A- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561"
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments
e Go#'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterIo''Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissionsoC'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew ts sx} "',16;@EJPV\bhntz
"(.4:@FLRX^djpv|
! $ ' * - 0 2 5 8 : < ? B D G J N !P "S $W %Z &^ (a )d *h +j ,l -o .r /t 0v 1z 2| 3~ 4 5 6 7 8
; < = > ? @ A B" D& E) F, G/ H2 I7 J: K= L@ MC NF OH PK QO RQ SS TV UY V[ W^ Xa Yc Ze [h \l ^o _q `u bx c{ e f g h i j
k l m n p q r# s% t' u+ v- w/ x1 y5 z8 |< }? ~B E H M P S V of flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| \ ^ a e g i l o q t w y { ~ ! # & ) + / 2 4 9 ; = A C E G K N R U X [ ^ c f i l o r t w Ã{ ă} Ń Ƅ DŽ Ȅ Ʉ
ʄ
˄ ̄ ̈́ ΄ Є ф ҄! Ԅ$ Մ' ׄ+ . ل2 ۄ5 ܄7 ݄9 ބ< ߄? A E H J O Q S W Y [ ] a g p y ' 1 : C L U ^ g q {
P 7 P co[(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\@- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base searchEo 'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars
O! o(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV testsc
o[(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^@- Bump version to 1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS; o (Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5Re -oo(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\A- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561"
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments
e Go#(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterI
o'(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions oC(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew
g 7 g -oo)Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\@- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)oK(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationEo (Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars plicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561"
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments
0 9 0 oC)Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skewo)Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV testsco[)Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^@- Bump version to 1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS;o )Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5Re
3h Eo )Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped charsGo#)Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterIo')Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
> q!*Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load oS*Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server oS)Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-8
- Resolves: Bug 1905450 - Internal unindexed search crashes the serveroK)Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication
r r oG*Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX oG*Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12 o9*Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN
!o?*Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent searchB o*Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)
r#qw*Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_replo"os*Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database
0 &o9+Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN%q!+Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high loadA$o*Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use
, t.\D r , D8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.
65debf30e942beaf68eeeebb661030f709a1c53b1981536c005e8dddf29b7da6D-
eef2f7ac436c0d23750d0d428880ec5d58260342fcb7de2587122eea70893429D,
99549f1842c7801ff61d826ce12f1351ce7f60f836b2dcf51fb46da34c4b3d1eD+
6471268f8ca47b59f93b0c5a8b8bbf5e9a7d6cfb337f2a89a19b76d82ac5bde2
B B B)o+Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)(oG+Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX'oG+Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12
o+os+Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database*o?+Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
( /o9,Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN.oG+Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version stringA-o+Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU user,qw+Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl
B B B2o,Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)1oG,Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX0oG,Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12
o4os,Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database3o?,Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
5
( 5 X9oG-Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-128o=,Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d@- Bump version to 1.3.11.1-3
- Resolves: rhbz#2224507 - Paged search impacts performance7oG,Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version stringA6o,Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU user5qw,Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl
B;o-Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular):oG-Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
o=os-Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database<o?-Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
( Ao=-Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d@- Bump version to 1.3.11.1-3
- Resolves: rhbz#2224507 - Paged search impacts performance@oG-Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version stringA?o-Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU user>qw-Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl
I fI CoG.Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleBmC-Thierry Bordaz <tbordaz@redhat.com> - 1.3.11.1-4ey- Bump version to 1.3.11.1-4
- Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetype
Eo?.Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent searchBDo.Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)
rGqw.Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_reploFos.Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database
KmC.Thierry Bordaz <tbordaz@redhat.com> - 1.3.11.1-4ey- Bump version to 1.3.11.1-4
- Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetypeJo=.Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d@- Bump version to 1.3.11.1-3
- Resolves: rhbz#2224507 - Paged search impacts performanceIoG.Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version stringAHo.Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use
cNo[/Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^@- Bump version to 1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS;Mo /Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5Re MLm1.James Chapman <jachapma@redhat.com> - 1.3.11.1-5f(@- Bump version to 1.3.11.1-5
- Resolves: RHEL-33337 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request
- Resolves: RHEL-34817 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c plicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561"
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments
^ GRo#/Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterIQo'/Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissionsPoC/Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skewOo/Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests
u 7 u UoS/Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the serverToK/Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationESo /Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars
un XoC0Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skewWo0Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV testsVq!/Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load
3h E[o 0Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped charsGZo#0Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterIYo'0Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
> ^q!0Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load ]oS0Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server\oK0Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication
\ ' \ Gco#1Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterIbo'1Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissionsaoC1Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skewX`oG0Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12_o90Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN
u 7 u foS1Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the servereoK1Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationEdo 1Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars
u_ XioG1Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12ho91Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DNgq!1Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load
K K Glo#2Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterIko'2Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissionsjoG1Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
u 7 u ooS2Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the servernoK2Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationEmo 2Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars
u_ XroG2Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12qo92Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DNpq!2Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load
Bto2Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)soG2Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
M 5l M woK3Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationEvo 3Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped charsGuo#3Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter
a ] a X{oG3Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12zo93Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DNyq!3Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load xoS3Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server
B}o3Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)|oG3Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
Eo 4Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars~o?3Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
> q!4Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load oS4Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server oK4Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication
r r oG4Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleXoG4Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12o94Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN
o?4Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent searchBo4Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)
K
K
oS5Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server oK5Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationoos4Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database
u_ X
oG5Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12 o95Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN q!5Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load
Bo5Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)oG5Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
oos5Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the databaseo?5Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
e
L e co[6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\@- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search:o 6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-5^=Q@- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)rqw5Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl
O! o6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV testsco[6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^@- Bump version to 1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS;o 6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5Re ρ-oo6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\A- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561"
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments
e Go#6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterIo'6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissionsoC6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew
P 7 P c o[7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\@- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base searchE o 6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars
O! !o7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV testsc o[7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^@- Bump version to 1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS; o 7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5Re Ӂ- oo7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\A- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561"
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments
e G$o#7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterI#o'7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions"oC7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew
g 7 g -'oo8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\@- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)&oK7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replicationE%o 7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars plicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561"
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments
0 9 0 +oC8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^@- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew*o8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^@- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV testsc)o[8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^@- Bump version to 1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS;(o 8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5Re
3h E.o 8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_"- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped charsG-o#8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^@- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilterI,o'8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^?@- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
> 2q!9Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high load 1oS9Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server 0oS8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_- Bump version to 1.3.10.2-8
- Resolves: Bug 1905450 - Internal unindexed search crashes the server/oK8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_@- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication
, t.\D r , DF
b15c5bd5d17c47937d82efe2f0ce115cd380671ef484581d4184399c840e2c35DE
a7b0d2e78f9226d952fd5d798225620b853fb2b0edd6abeda0fcca3095856f7aDD
cf312b0640aa93a5701862f262416738887b1618922b58eaadfe16d281c1fa7dDC
d10825f54b07b6022f065b39a4e37c8c89bfdc877a230746fbbc048f9659348aDB
ef9ae19900dd432de99370f4bb886c82cc0f4b68367dc2be63113d3f3cbd48d1DA
8b82511897f48ce484e303fe650c32ea1191e71ee0cbd9aff580743fa4f9067cD@
49941263a7a0309c58b3d3e00ab81c56b1ee1a70b49b873188cc23686f5d3d9bD?
cae6bd3ac4c68910abe44b5f1d6e48b99b76914d3a6223b9511bde08f8a3e1cdD>
d98a7567aa18df65a4b612f107387d6f50362fcef232a4c1fe5a246e2d477764D=
fce742e752f83c91c4d9e2dc4fad5ff1b7affb7363270b752a793df36c00754fD<
4cae2658d6c984132e253fc1cb8af035251a3acc79acc7957fc3c92111b0f643D;
6858631f1ec62fd357122548e9196427a27ee3daeb8bc9decbb2919eedf39730D:
40080eb44ef8aa6b4771bc9e085e56264b9e562822c2bbfbd713b6887b64b41fD9
7f6f935600e1b0c0b16538a2e5c86c076209ebb973e4d33e6f98c66d85973c9e
r r 5oG9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX4oG9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-123o99Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN
7o?9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent searchB6o9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)
r9qw9Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_replo8os9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database
0 <o9:Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN;q!:Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7@- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation
- Resolves: Bug 1881968 - Replication Lag under high loadA:o9Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use
B B B?o:Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)>oG:Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX=oG:Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12
oAos:Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database@o?:Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
( Eo9;Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DNDoG:Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version stringACo:Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU userBqw:Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl
B B BHo;Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)GoG;Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleXFoG;Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12
oJos;Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the databaseIo?;Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
5
( 5 XOoG<Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`+- Bump version to 1.3.10.2-12No=;Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d@- Bump version to 1.3.11.1-3
- Resolves: rhbz#2224507 - Paged search impacts performanceMoG;Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version stringALo;Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU userKqw;Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl
BQo<Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)PoG<Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
oSos<Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the databaseRo?<Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
( Wo=<Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d@- Bump version to 1.3.11.1-3
- Resolves: rhbz#2224507 - Paged search impacts performanceVoG<Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version stringAUo<Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU userTqw<Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl
I fI YoG=Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleXmC<Thierry Bordaz <tbordaz@redhat.com> - 1.3.11.1-4ey- Bump version to 1.3.11.1-4
- Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetype
[o?=Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent searchBZo=Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{@- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)
r]qw=Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6@- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_replo\os=Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b=- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database
amC=Thierry Bordaz <tbordaz@redhat.com> - 1.3.11.1-4ey- Bump version to 1.3.11.1-4
- Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetype`o==Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d@- Bump version to 1.3.11.1-3
- Resolves: rhbz#2224507 - Paged search impacts performance_oG=Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version stringA^o=Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c@- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use
J A" J YgaW>Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)yfa>Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)eaY>Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553}da >Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717kca{>Jan Horak <jhorak@redhat.com> - 6.7.8.9-11V@- Fixed crash when processing .exr files (rhbz#1303227)Mbm1=James Chapman <jachapma@redhat.com> - 1.3.11.1-5f(@- Bump version to 1.3.11.1-5
- Resolves: RHEL-33337 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request
- Resolves: RHEL-34817 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c
% h.@ % ypa?Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)oaY?Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553}na ?Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717kma{?Jan Horak <jhorak@redhat.com> - 6.7.8.9-11V@- Fixed crash when processing .exr files (rhbz#1303227)elcm>Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdkck>Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hjcs>Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJic7>Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68Hha5>Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white images
7 Y :R 7 yya@Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)xaY@Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553}wa @Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717evcm?Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againduck?Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''htcs?Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJsc7?Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68Hra5?Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYqaW?Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)
` Y : ` aYAJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553}a AJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717P cC@Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixecm@Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd~ck@Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''h}cs@Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJ|c7@Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68H{a5@Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYzaW@Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)
d (%V d aYBJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553P
cCAJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixe cmAJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdckAJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hcsAJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJc7AJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68Ha5AJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYaWAJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)yaAJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)
(%V QcEBJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800PcCBJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixecmBJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdckBJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hcsBJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJc7BJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68Ha5BJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesY
aWBJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)y aBJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)
d a> d P cCCJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixe cmCJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdckCJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hcsCJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJc7CJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68Ha5CJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYaWCJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)yaCJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)aYCJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553
[ 0<j [ Q'cEDJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800P&cCDJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixe%cmDJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd$ckDJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''h#csDJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJ"c7DJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68H!a5DJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesY aWDJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)y aDJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)Q cECJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800
Y .:h Y Q1cEEJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800P0cCEJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixe/cmEJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd.ckEJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''h-csEJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJ,c7EJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68H+a5EJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesY*aWEJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)y)aEJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)S(cIDJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;- Added fix for CVE-2021-40211
B < E B h:csFJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJ9c7FJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68H8a5FJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesY7aWFJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)y6aFJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)5aYFJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553}4a FJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k3a{FJan Horak <jhorak@redhat.com> - 6.7.8.9-11V@- Fixed crash when processing .exr files (rhbz#1303227)S2cIEJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;- Added fix for CVE-2021-40211
4 1C( 4 JCc7GJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68HBa5GJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYAaWGJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)y@aGJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)?aYGJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553}>a GJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k=a{GJan Horak <jhorak@redhat.com> - 6.7.8.9-11V@- Fixed crash when processing .exr files (rhbz#1303227)e<cmFJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd;ckFJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''
, t.\D r , DT
e614cee98b3c2a67c0a489a233ca9a7a574ea6bc8dd166f835f26bca8d3d5f7cDS
6d4f5821c8a6634679262138e6c634828699fef39bbd22f409c545e572e816bcDR
572d9ccefce27e99905ba8c221c2216b7ba572949a397e457aeaf3e65ce8b4e4DQ
fb00ca97e06f7da066e8d05cafb17b9f9680e39f50979090e489d8a1720bb4d4DP
3fb72ac0367e9afd39874f48b9a0b356b9cbb0b86d41265538358ef72583d32dDO
5fa6b764fa4d36de1e4b14029d52584b86f65e0020290798aecbd853fb5b4ab5DN
96954d570d0d25ab837bbc471057f6a90d46ffff9195b1391abb3cbc708c7684DM
f6a237d150654379162b6b0cb9396c65ec4227bf24e4b01d1dbb5180dc3b28beDL
342100bd7ce3ca8e951285697781ddb9192c0a02dd56cad55d48bdf20a74bec2DK
54773bd4792a30ed2a90d50d65778c4d34f672bedec6da03981162ca13109417DJ
3694e0f350aab4369f5eda09dba8aaf0c4d0128990509c2eab7a69e8a99c5400DI
208142489b5b939b70a9d0d5242ac84ad700f6bc7f8549c1b26d447993c66b86DH
3d1f2217dd6b5ed505a6858933c562175be86840b5c6c7328291ec8c31333a56DG
365ab6c383dd555fe42283836abe7f7014bf20c41b0828d72f1c13ab138cc1d1
7 .F+ 7 JLc7HJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68HKa5HJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYJaWHJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)yIaHJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)HaYHJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553}Ga HJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717eFcmGJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdEckGJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hDcsGJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflicts
1 .sT | 1 HUa5IJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYTaWIJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)ySaIJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)RaYIJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553}Qa IJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717PPcCHJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixeOcmHJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdNckHJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hMcsHJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflicts
d Hy& d H^a5JJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesY]aWJJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)y\aJJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)[aYJJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553PZcCIJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixeYcmIJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdXckIJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hWcsIJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJVc7IJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68
[ Hy&3 [ YgaWKJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)yfaKJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)eaYKJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553QdcEJJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800PccCJJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixebcmJJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdackJJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''h`csJJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJ_c7JJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68
d h. d Hqa5LJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYpaWLJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)yoaLJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)QncEKJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800PmcCKJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixelcmKJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdkckKJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hjcsKJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJic7KJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68Hha5KJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white images
Y Hy&| Y H{a5MJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYzaWMJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)yyaMJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)SxcILJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;- Added fix for CVE-2021-40211QwcELJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800PvcCLJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixeucmLJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdtckLJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hscsLJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJrc7LJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68
Hy&| }a NJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717ka{NJan Horak <jhorak@redhat.com> - 6.7.8.9-11V@- Fixed crash when processing .exr files (rhbz#1303227)ScIMJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;- Added fix for CVE-2021-40211QcEMJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800P cCMJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixecmMJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd~ckMJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''h}csMJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJ|c7MJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68
I a> I k
a{OJan Horak <jhorak@redhat.com> - 6.7.8.9-11V@- Fixed crash when processing .exr files (rhbz#1303227)e cmNJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd ckNJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''h
csNJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJ c7NJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68Ha5NJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYaWNJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)yaNJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)aYNJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553
7 e q 7 ecmOJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdckOJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hcsOJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJc7OJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68Ha5OJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYaWOJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)yaOJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)aYOJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553}a OJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717
7 e q 7 e cmPJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd ckPJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''h csPJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJ c7PJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68Ha5PJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYaWPJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)yaPJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)aYPJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553}a PJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717
L -k L d(ckQJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''h'csQJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJ&c7QJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68H%a5QJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesY$aWQJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)y#aQJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)"aYQJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553}!a QJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717P cCPJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fix
d E*6 d d1ckRJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''h0csRJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJ/c7RJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68H.a5RJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesY-aWRJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)y,aRJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)+aYRJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553P*cCQJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixe)cmQJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 again
w ERz/ w h:csSJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJ9c7SJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68H8a5SJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesY7aWSJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)y6aSJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)5aYSJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553Q4cERJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800P3cCRJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixe2cmRJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 again
H 1g H dDckTJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hCcsTJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJBc7TJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68HAa5TJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesY@aWTJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)y?aTJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)Q>cESJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800P=cCSJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixe<cmSJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd;ckSJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''
Y E x+ Y dNckUJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hMcsUJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJLc7UJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68HKa5UJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYJaWUJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)yIaUJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)SHcITJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;- Added fix for CVE-2021-40211QGcETJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800PFcCTJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixeEcmTJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 again
, t.\D r , Db
c7663ee5f2439075ade107aa7f0383f301032506d3673446ac4c84d046337418Da
f27e3d167e8d7cfb2c448d400f034b7443c2e076e94b38a67fddd951a9bf745eD`
bb05359bb91eb56f0684f800012c621df3fb69caa61349ed4d20292998b1cb0bD_
4c39fd8baa3677dd6ae1debc1bc8f2bcb012f024717dc7b97179d39ba6e3853fD^
177ecfa448785c1fa6fae690a5662325ebe3e141bf45117920f280b5a8880a0aD]
0df91ae3f7e140e17025cfcac0a1bbb8507f665cf4f2ae6e8e6951f0fbc667e5D\
49ac1322f5ed8d216331f29c35eab930dc5be738f27bf00fca63036fbce5de80D[
3fa609f1cadb881d127a3eed1c7b8f2fa2ba4efc32cb2e34e025b3d4215af9d1DZ
e56a5b95dac0bbc46dff9f5743926a4f4bf4883bf7b515cdcd6310771c36a4a8DY
b095f7fcbb5d718e30c01471ddebc9eca7b0315ab21ba2c286f3e4c44b8bf2b1DX
d45776ea070dd01bfa5681b3d5be4cd2fdb7fe2baac5c1720ab216221ef7ddf8DW
c119aff62d5c0644926253cc760d84d4a8fbbb2124668b95f93468f578a85b04DV
a1ac854d8e90e02d163b93f8f41c02c3b799b35db98f425c835e937468ad058bDU
f613394ac503882a78ac261fc0ddce0cd6b033530342f31d88f080b4b99f51b0
6 E- 6 YWaWVJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)yVaVJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)UaYVJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553}Ta VJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717kSa{VJan Horak <jhorak@redhat.com> - 6.7.8.9-11V@- Fixed crash when processing .exr files (rhbz#1303227)SRcIUJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;- Added fix for CVE-2021-40211QQcEUJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800PPcCUJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixeOcmUJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 again
% h.@ % y`aWJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)_aYWJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553}^a WJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k]a{WJan Horak <jhorak@redhat.com> - 6.7.8.9-11V@- Fixed crash when processing .exr files (rhbz#1303227)e\cmVJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd[ckVJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hZcsVJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJYc7VJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68HXa5VJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white images
7 Y :R 7 yiaXJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)haYXJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553}ga XJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717efcmWJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdeckWJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hdcsWJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJcc7WJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68Hba5WJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYaaWWJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)
` Y : ` raYYJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553}qa YJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717PpcCXJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixeocmXJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdnckXJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hmcsXJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJlc7XJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68Hka5XJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYjaWXJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)
d (%V d {aYZJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553PzcCYJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixeycmYJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdxckYJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hwcsYJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJvc7YJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68Hua5YJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYtaWYJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)ysaYJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)
(%V QcEZJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800PcCZJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixecmZJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdckZJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''h csZJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJc7ZJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68H~a5ZJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesY}aWZJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)y|aZJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)
d a> d P
cC[Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixe cm[Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd ck[Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''h
cs[Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJ c7[Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68Ha5[Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYaW[Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)ya[Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)aY[Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553
[ 0<j [ QcE\Jan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800PcC\Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixecm\Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdck\Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hcs\Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJc7\Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68Ha5\Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYaW\Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)ya\Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)QcE[Jan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800
Y .:h Y Q!cE]Jan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800P cC]Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixe cm]Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd ck]Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''h cs]Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJ c7]Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68Ha5]Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYaW]Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)ya]Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)ScI\Jan Horak <jhorak@redhat.com> - 6.9.10.68-7e;- Added fix for CVE-2021-40211
B < E B h*cs^Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJ)c7^Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68H(a5^Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesY'aW^Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)y&a^Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)%aY^Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553}$a ^Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k#a{^Jan Horak <jhorak@redhat.com> - 6.7.8.9-11V@- Fixed crash when processing .exr files (rhbz#1303227)S"cI]Jan Horak <jhorak@redhat.com> - 6.9.10.68-7e;- Added fix for CVE-2021-40211
7 1: 7 h3cs_Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJ2c7_Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68H1a5_Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesY0aW_Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)y/a_Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602).aY_Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553}-a _Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717e,cm^Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd+ck^Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''
d 1?g d h<cs`Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJ;c7`Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68H:a5`Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesY9aW`Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)y8a`Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)7aY`Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553P6cC_Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixe5cm_Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd4ck_Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''
H 1g H dFckaJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hEcsaJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJDc7aJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68HCa5aJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYBaWaJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)yAaaJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)Q@cE`Jan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800P?cC`Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixe>cm`Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd=ck`Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''
6 E- 6 YOaWbJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)yNabJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)MaYbJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553}La bJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717kKa{bJan Horak <jhorak@redhat.com> - 6.7.8.9-11V@- Fixed crash when processing .exr files (rhbz#1303227)SJcIaJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;- Added fix for CVE-2021-40211QIcEaJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800PHcCaJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixeGcmaJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 again
7 h. 7 YXaWcJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)yWacJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)VaYcJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553}Ua cJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717eTcmbJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdSckbJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hRcsbJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJQc7bJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68HPa5bJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white images
, t.\D r , Dp
21113ab4dcd135895d98e51d9d540e8be477abdc44e185a460a9a835e382a7c1Do
a3a98ff12318616c1641d6e0d2dadf6e2f268b6bbc34e65924fe720f0ed2b498Dn
b59dc7ffbf0ef066ff9a1cf076ed8bff6d49817bed656cf03853d4c14c19563fDm
c7c905b4d230c3305d7223c1efb2e2c29d90ee0fe667ec5973b84522b52f1b7cDl
d309a7bec2af466981338b2729711aca0aac30101fc7b53822baf4eca6bf3bf3Dk
d85c7c7044bb25d459d1d3377a16e6bc25cd16ea3a67985795886527085aca81Dj
da671c2234ad85d7898dc39cf7cbbe3f81c92f9de8153ed656a948fe022cc14bDi
b73a625e6724b514380e5393dc8ac1ff68137ee32e63057c82c80eb5439701baDh
82770f241e9bdc035784ea9189503fbe592d5c29147b6f0860949963afbefbe1Dg
20385107dd6a4623cd7aaccc57b216a7fd04a22b8f56bf7e874d9fbe49095bf1Df
53cb4b1814b006d5822769285fafe984c2312ad59f2a1efd65a648bf4d1f6df1De
af07229f94ef571d7d7fa63fd7b1e5c4feaf193b6302b4faf6e64302611433ceDd
62f87a828471cada41da0e65515893c663ffb4843c97b49a68ce916292d1f8b2Dc
4dc1a1327e468460b517ab53ed5f213f2ea0b15a999fc2c3f80d7d5b477118cd
d h.< d YaaWdJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)y`adJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)_aYdJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
rhbz#1326834, rhbz#1334188, rhbz#1269553P^cCcJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixe]cmcJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd\ckcJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''h[cscJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJZc7cJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68HYa5cJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white images
d h. d Hka5eJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white imagesYjaWeJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4- Enable lcms2 support (rhbz#1585291)yiaeJan Horak <jhorak@redhat.com> - 6.7.8.9-16[^- Added fix for long convert under some circumstances (rhbz#1633602)QhcEdJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800PgcCdJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixefcmdJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdeckdJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hdcsdJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJcc7dJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68Hba5dJan Horak <jhorak@redhat.com> - 6.7.8.9-18\,@- Fixed white images
a Hy&| a Lu_?fDaniel Mach <dmach@redhat.com> - 0.14.8-3Rk- Mass rebuild 2013-12-27hteqfJon Ciesla <limburgher@gmail.com> - 0.14.8-2Q- Patch for double free, CVE-2013-2126, BZ 968387.^se]fJon Ciesla <limburgher@gmail.com> - 0.14.8-1Q- Latest upstream, fixes gcc 4.8 issues.SrcIeJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;- Added fix for CVE-2021-40211QqcEeJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK- Added fix for rhbz#2005800PpcCeJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ- Adding CTV-2020-29599 fixeocmeJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdnckeJan Horak <jhorak@redhat.com> - 6.9.10.68-3]M@- Fixing freeze when svg file contains class=''hmcseJan Horak <jhorak@redhat.com> - 6.9.10.68-2]@- Fixed ghostscript fonts, fixed multilib conflictsJlc7eJan Horak <jhorak@redhat.com> - 6.9.10.68-1]@- Rebase to 6.9.10.68
/ s-c / h~eqgJon Ciesla <limburgher@gmail.com> - 0.14.8-2Q- Patch for double free, CVE-2013-2126, BZ 968387.^}e]gJon Ciesla <limburgher@gmail.com> - 0.14.8-1Q- Latest upstream, fixes gcc 4.8 issues.e|oafDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-2e6`@- Fix CVE-2021-32142
- Resolves: RHEL-9524b{o[fDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-1]S- Update to 0.19.4
- Resolves: #1741274bzo[fDebarshi Ray <rishi@fedoraproject.org> - 0.19.2-1\,- Update to 0.19.2
- Resolves: #1543597|yo
fDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-2\,- Remove the samples subpackage from RHEL 7
- Resolves: #1543597bxo[fDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-1\- Update to 0.19.1
- Resolves: #1543597_w?fDaniel Mach <dmach@redhat.com> - 0.14.8-5.20120830git98d925RU- Mass rebuild 2014-01-24 vfDebarshi Ray <rishi@fedoraproject.org> - 0.14.8-4.20120830git98d925R=- Fix CVE-2013-1438 and CVE-2013-1439
- Resolves: #1002718
K $]y K ^e]hJon Ciesla <limburgher@gmail.com> - 0.14.8-1Q- Latest upstream, fixes gcc 4.8 issues.eoagDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-2e6`@- Fix CVE-2021-32142
- Resolves: RHEL-9524bo[gDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-1]S- Update to 0.19.4
- Resolves: #1741274bo[gDebarshi Ray <rishi@fedoraproject.org> - 0.19.2-1\,- Update to 0.19.2
- Resolves: #1543597|o
gDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-2\,- Remove the samples subpackage from RHEL 7
- Resolves: #1543597bo[gDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-1\- Update to 0.19.1
- Resolves: #1543597_?gDaniel Mach <dmach@redhat.com> - 0.14.8-5.20120830git98d925RU- Mass rebuild 2014-01-24 gDebarshi Ray <rishi@fedoraproject.org> - 0.14.8-4.20120830git98d925R=- Fix CVE-2013-1438 and CVE-2013-1439
- Resolves: #1002718L_?gDaniel Mach <dmach@redhat.com> - 0.14.8-3Rk- Mass rebuild 2013-12-27
A FWs A eoahDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-2e6`@- Fix CVE-2021-32142
- Resolves: RHEL-9524bo[hDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-1]S- Update to 0.19.4
- Resolves: #1741274bo[hDebarshi Ray <rishi@fedoraproject.org> - 0.19.2-1\,- Update to 0.19.2
- Resolves: #1543597|
o
hDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-2\,- Remove the samples subpackage from RHEL 7
- Resolves: #1543597b o[hDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-1\- Update to 0.19.1
- Resolves: #1543597_ ?hDaniel Mach <dmach@redhat.com> - 0.14.8-5.20120830git98d925RU- Mass rebuild 2014-01-24
hDebarshi Ray <rishi@fedoraproject.org> - 0.14.8-4.20120830git98d925R=- Fix CVE-2013-1438 and CVE-2013-1439
- Resolves: #1002718L _?hDaniel Mach <dmach@redhat.com> - 0.14.8-3Rk- Mass rebuild 2013-12-27heqhJon Ciesla <limburgher@gmail.com> - 0.14.8-2Q- Patch for double free, CVE-2013-2126, BZ 968387.
H 4X H bo[iDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-1]S- Update to 0.19.4
- Resolves: #1741274bo[iDebarshi Ray <rishi@fedoraproject.org> - 0.19.2-1\,- Update to 0.19.2
- Resolves: #1543597|o
iDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-2\,- Remove the samples subpackage from RHEL 7
- Resolves: #1543597bo[iDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-1\- Update to 0.19.1
- Resolves: #1543597_?iDaniel Mach <dmach@redhat.com> - 0.14.8-5.20120830git98d925RU- Mass rebuild 2014-01-24 iDebarshi Ray <rishi@fedoraproject.org> - 0.14.8-4.20120830git98d925R=- Fix CVE-2013-1438 and CVE-2013-1439
- Resolves: #1002718L_?iDaniel Mach <dmach@redhat.com> - 0.14.8-3Rk- Mass rebuild 2013-12-27heqiJon Ciesla <limburgher@gmail.com> - 0.14.8-2Q- Patch for double free, CVE-2013-2126, BZ 968387.^e]iJon Ciesla <limburgher@gmail.com> - 0.14.8-1Q- Latest upstream, fixes gcc 4.8 issues.
E 7}) E b"o[jDebarshi Ray <rishi@fedoraproject.org> - 0.19.2-1\,- Update to 0.19.2
- Resolves: #1543597|!o
jDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-2\,- Remove the samples subpackage from RHEL 7
- Resolves: #1543597b o[jDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-1\- Update to 0.19.1
- Resolves: #1543597_ ?jDaniel Mach <dmach@redhat.com> - 0.14.8-5.20120830git98d925RU- Mass rebuild 2014-01-24 jDebarshi Ray <rishi@fedoraproject.org> - 0.14.8-4.20120830git98d925R=- Fix CVE-2013-1438 and CVE-2013-1439
- Resolves: #1002718L _?jDaniel Mach <dmach@redhat.com> - 0.14.8-3Rk- Mass rebuild 2013-12-27h eqjJon Ciesla <limburgher@gmail.com> - 0.14.8-2Q- Patch for double free, CVE-2013-2126, BZ 968387.^e]jJon Ciesla <limburgher@gmail.com> - 0.14.8-1Q- Latest upstream, fixes gcc 4.8 issues.eoaiDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-2e6`@- Fix CVE-2021-32142
- Resolves: RHEL-9524
E 3g) E |+o
kDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-2\,- Remove the samples subpackage from RHEL 7
- Resolves: #1543597b*o[kDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-1\- Update to 0.19.1
- Resolves: #1543597_)?kDaniel Mach <dmach@redhat.com> - 0.14.8-5.20120830git98d925RU- Mass rebuild 2014-01-24 (kDebarshi Ray <rishi@fedoraproject.org> - 0.14.8-4.20120830git98d925R=- Fix CVE-2013-1438 and CVE-2013-1439
- Resolves: #1002718L'_?kDaniel Mach <dmach@redhat.com> - 0.14.8-3Rk- Mass rebuild 2013-12-27h&eqkJon Ciesla <limburgher@gmail.com> - 0.14.8-2Q- Patch for double free, CVE-2013-2126, BZ 968387.^%e]kJon Ciesla <limburgher@gmail.com> - 0.14.8-1Q- Latest upstream, fixes gcc 4.8 issues.e$oajDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-2e6`@- Fix CVE-2021-32142
- Resolves: RHEL-9524b#o[jDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-1]S- Update to 0.19.4
- Resolves: #1741274
A 6A /u!lBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B@- core: fix activation of ovs slaves after a service restart (rh #1733709)e.oakDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-2e6`@- Fix CVE-2021-32142
- Resolves: RHEL-9524b-o[kDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-1]S- Update to 0.19.4
- Resolves: #1741274b,o[kDebarshi Ray <rishi@fedoraproject.org> - 0.19.2-1\,- Update to 0.19.2
- Resolves: #1543597
r 2u lBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [- ovs: allow changing mac address of bridges and interfaces (rh #1740557)B1ulBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]@- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)
0k-lThomas Haller <thaller@redhat.com> - 1:1.18.4-1]- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793) of wflrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| ( 1 : D N W `
i r {
! * 3 < F O X a k u ~ " + !/ "2 $7 %9 &< 'A (C )F *K +M ,P -U .W /Z 0_ 1a 3d 4i 5k 6n 7s 8u 9x :} ; < = > ? @ A B C D E F% G' H* I/ J1 K4 L9 M; N> OC PE QH RM SO TR UW VY W\ Xa Yc Zf [k \m ^r _w `~ a b c d& e0 f: gD hN iX jb kl ls ny o p q r s t u' v,
. . I7k+lThomas Haller <thaller@redhat.com> - 1:1.18.8-1^@- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.6u-lBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a5uSlBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^- Update translations (rh #1796852)-4kslThomas Haller <thaller@redhat.com> - 1:1.18.6-2^- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)Y3uAlBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)
9u!mBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B@- core: fix activation of ovs slaves after a service restart (rh #1733709)c8k_lThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)
r <u mBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [- ovs: allow changing mac address of bridges and interfaces (rh #1740557)B;umBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]@- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)
:k-mThomas Haller <thaller@redhat.com> - 1:1.18.4-1]- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)
. . IAk+mThomas Haller <thaller@redhat.com> - 1:1.18.8-1^@- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.@u-mBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a?uSmBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^- Update translations (rh #1796852)->ksmThomas Haller <thaller@redhat.com> - 1:1.18.6-2^- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)Y=uAmBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)
Cu!nBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B@- core: fix activation of ovs slaves after a service restart (rh #1733709)cBk_mThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)
r Fu nBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [- ovs: allow changing mac address of bridges and interfaces (rh #1740557)BEunBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]@- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)
Dk-nThomas Haller <thaller@redhat.com> - 1:1.18.4-1]- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)
. . IKk+nThomas Haller <thaller@redhat.com> - 1:1.18.8-1^@- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.Ju-nBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)aIuSnBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^- Update translations (rh #1796852)-HksnThomas Haller <thaller@redhat.com> - 1:1.18.6-2^- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)YGuAnBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)
Mu!oBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B@- core: fix activation of ovs slaves after a service restart (rh #1733709)cLk_nThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)
r Pu oBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [- ovs: allow changing mac address of bridges and interfaces (rh #1740557)BOuoBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]@- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)
Nk-oThomas Haller <thaller@redhat.com> - 1:1.18.4-1]- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)
. . IUk+oThomas Haller <thaller@redhat.com> - 1:1.18.8-1^@- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.Tu-oBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)aSuSoBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^- Update translations (rh #1796852)-RksoThomas Haller <thaller@redhat.com> - 1:1.18.6-2^- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)YQuAoBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)
Wu!pBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B@- core: fix activation of ovs slaves after a service restart (rh #1733709)cVk_oThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)
r Zu pBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [- ovs: allow changing mac address of bridges and interfaces (rh #1740557)BYupBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]@- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)
Xk-pThomas Haller <thaller@redhat.com> - 1:1.18.4-1]- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)
. . I_k+pThomas Haller <thaller@redhat.com> - 1:1.18.8-1^@- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.^u-pBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a]uSpBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^- Update translations (rh #1796852)-\kspThomas Haller <thaller@redhat.com> - 1:1.18.6-2^- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)Y[uApBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)
au!qBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B@- core: fix activation of ovs slaves after a service restart (rh #1733709)c`k_pThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)
, t.\D r , D~
8376cfa512fe6b2ff76656a962eb9991e84736e4a697d521ce94ef01b76d8224D}
96e5936275322903cfbb6baf53a0c7b17d256a8f32f01311f863e027c6f7d955D|
1eae80c524fc2bc5a90ced35062890a40b5625b866e658c984d2c21a6b84fbdaD{
0d7ee838bc95b1ca0f6653c7bb6bf7f82fd91bddf5008eb108ab46da2a4a15a4Dz
bcf2e159d49fe0cc5b342fc05255f862141272c22ce694e38e0133129e1ca198Dy
6a1e8e996df86eab01a9069d9b5a346d8a727e6c633a9f89b1adef59b208e01dDx
cbb13427dedac5cf271bc5a5113b736a34f96516510eb972cb3320ae396950fbDw
80bdac5815e2cb87ffd8f9a1347f373f9a9ced0b8d2fe36ed814bd54f4ef39faDv
366db37e736f288688e2f7de25a2589d720f57d0ee9d9147989b609d9dfea648Du
9b6de03afb9e2ed1eb1fe326e14a90ed08a67cee15e148db6d1d484cd4022e4cDt
d7b21ff17ce56f83ff2000fca6f369f4160b7c039d960862da62ff6aab5c8df3Ds
3cbf76c62b3dabd78db73ad0e95a34d50022e61f36e7a967aabcc7f9c3f4c6ccDr
2020ae44e6c85c50fdf7fbfec19d2bbaf6f8395f641b1b48c4743285b9fd8bdcDq
121ed67b550b9b757c921a1f6eba668e72a8d28d183054b14f8e1d37b81b602b
r du qBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [- ovs: allow changing mac address of bridges and interfaces (rh #1740557)BcuqBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]@- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)
bk-qThomas Haller <thaller@redhat.com> - 1:1.18.4-1]- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)
. . Iik+qThomas Haller <thaller@redhat.com> - 1:1.18.8-1^@- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.hu-qBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)aguSqBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^- Update translations (rh #1796852)-fksqThomas Haller <thaller@redhat.com> - 1:1.18.6-2^- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)YeuAqBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)
ku!rBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B@- core: fix activation of ovs slaves after a service restart (rh #1733709)cjk_qThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)
r nu rBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [- ovs: allow changing mac address of bridges and interfaces (rh #1740557)BmurBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]@- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)
lk-rThomas Haller <thaller@redhat.com> - 1:1.18.4-1]- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)
. . Isk+rThomas Haller <thaller@redhat.com> - 1:1.18.8-1^@- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.ru-rBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)aquSrBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^- Update translations (rh #1796852)-pksrThomas Haller <thaller@redhat.com> - 1:1.18.6-2^- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)YouArBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)
uu!sBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B@- core: fix activation of ovs slaves after a service restart (rh #1733709)ctk_rThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)
r xu sBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [- ovs: allow changing mac address of bridges and interfaces (rh #1740557)BwusBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]@- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)
vk-sThomas Haller <thaller@redhat.com> - 1:1.18.4-1]- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)
. . I}k+sThomas Haller <thaller@redhat.com> - 1:1.18.8-1^@- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.|u-sBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a{uSsBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^- Update translations (rh #1796852)-zkssThomas Haller <thaller@redhat.com> - 1:1.18.6-2^- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)YyuAsBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)
u!tBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B@- core: fix activation of ovs slaves after a service restart (rh #1733709)c~k_sThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)
r u tBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [- ovs: allow changing mac address of bridges and interfaces (rh #1740557)ButBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]@- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)
k-tThomas Haller <thaller@redhat.com> - 1:1.18.4-1]- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)
. . Ik+tThomas Haller <thaller@redhat.com> - 1:1.18.8-1^@- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.u-tBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)auStBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^- Update translations (rh #1796852)-kstThomas Haller <thaller@redhat.com> - 1:1.18.6-2^- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)YuAtBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)
u!uBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B@- core: fix activation of ovs slaves after a service restart (rh #1733709)ck_tThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)
r u uBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [- ovs: allow changing mac address of bridges and interfaces (rh #1740557)B uuBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]@- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)
k-uThomas Haller <thaller@redhat.com> - 1:1.18.4-1]- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)
. . Ik+uThomas Haller <thaller@redhat.com> - 1:1.18.8-1^@- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.u-uBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)auSuBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^- Update translations (rh #1796852)-ksuThomas Haller <thaller@redhat.com> - 1:1.18.6-2^- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)Y
uAuBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)
u!vBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B@- core: fix activation of ovs slaves after a service restart (rh #1733709)ck_uThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)
r u vBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [- ovs: allow changing mac address of bridges and interfaces (rh #1740557)BuvBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]@- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)
k-vThomas Haller <thaller@redhat.com> - 1:1.18.4-1]- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)
. . Ik+vThomas Haller <thaller@redhat.com> - 1:1.18.8-1^@- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.u-vBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)auSvBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^- Update translations (rh #1796852)-ksvThomas Haller <thaller@redhat.com> - 1:1.18.6-2^- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)YuAvBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)
u!wBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B@- core: fix activation of ovs slaves after a service restart (rh #1733709)c k_vThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)
r u wBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [- ovs: allow changing mac address of bridges and interfaces (rh #1740557)B uwBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]@- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)
k-wThomas Haller <thaller@redhat.com> - 1:1.18.4-1]- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)
. . I%k+wThomas Haller <thaller@redhat.com> - 1:1.18.8-1^@- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.$u-wBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a#uSwBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^- Update translations (rh #1796852)-"kswThomas Haller <thaller@redhat.com> - 1:1.18.6-2^- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)Y!uAwBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)
'u!xBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B@- core: fix activation of ovs slaves after a service restart (rh #1733709)c&k_wThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)
r *u xBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [- ovs: allow changing mac address of bridges and interfaces (rh #1740557)B)uxBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]@- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)
(k-xThomas Haller <thaller@redhat.com> - 1:1.18.4-1]- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)
. . I/k+xThomas Haller <thaller@redhat.com> - 1:1.18.8-1^@- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties..u-xBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a-uSxBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^- Update translations (rh #1796852)-,ksxThomas Haller <thaller@redhat.com> - 1:1.18.6-2^- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)Y+uAxBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)
1u!yBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B@- core: fix activation of ovs slaves after a service restart (rh #1733709)c0k_xThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)
r 4u yBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [- ovs: allow changing mac address of bridges and interfaces (rh #1740557)B3uyBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]@- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)
2k-yThomas Haller <thaller@redhat.com> - 1:1.18.4-1]- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)
. . I9k+yThomas Haller <thaller@redhat.com> - 1:1.18.8-1^@- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.8u-yBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a7uSyBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^- Update translations (rh #1796852)-6ksyThomas Haller <thaller@redhat.com> - 1:1.18.6-2^- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)Y5uAyBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)
;u!zBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B@- core: fix activation of ovs slaves after a service restart (rh #1733709)c:k_yThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)
r >u zBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [- ovs: allow changing mac address of bridges and interfaces (rh #1740557)B=uzBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]@- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)
<k-zThomas Haller <thaller@redhat.com> - 1:1.18.4-1]- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)
. . ICk+zThomas Haller <thaller@redhat.com> - 1:1.18.8-1^@- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.Bu-zBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)aAuSzBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^- Update translations (rh #1796852)-@kszThomas Haller <thaller@redhat.com> - 1:1.18.6-2^- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)Y?uAzBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)
Eu!{Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B@- core: fix activation of ovs slaves after a service restart (rh #1733709)cDk_zThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)
r Hu {Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [- ovs: allow changing mac address of bridges and interfaces (rh #1740557)BGu{Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]@- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)
Fk-{Thomas Haller <thaller@redhat.com> - 1:1.18.4-1]- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)
. . IMk+{Thomas Haller <thaller@redhat.com> - 1:1.18.8-1^@- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.Lu-{Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)aKuS{Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^- Update translations (rh #1796852)-Jks{Thomas Haller <thaller@redhat.com> - 1:1.18.6-2^- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)YIuA{Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)
Ou!|Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B@- core: fix activation of ovs slaves after a service restart (rh #1733709)cNk_{Thomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)
r Ru |Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [- ovs: allow changing mac address of bridges and interfaces (rh #1740557)BQu|Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]@- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)
Pk-|Thomas Haller <thaller@redhat.com> - 1:1.18.4-1]- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)
. . IWk+|Thomas Haller <thaller@redhat.com> - 1:1.18.8-1^@- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.Vu-|Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)aUuS|Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^- Update translations (rh #1796852)-Tks|Thomas Haller <thaller@redhat.com> - 1:1.18.6-2^- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)YSuA|Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)
Yu!}Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B@- core: fix activation of ovs slaves after a service restart (rh #1733709)cXk_|Thomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)
r \u }Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [- ovs: allow changing mac address of bridges and interfaces (rh #1740557)B[u}Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]@- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)
Zk-}Thomas Haller <thaller@redhat.com> - 1:1.18.4-1]- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)
. . Iak+}Thomas Haller <thaller@redhat.com> - 1:1.18.8-1^@- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.`u-}Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a_uS}Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^- Update translations (rh #1796852)-^ks}Thomas Haller <thaller@redhat.com> - 1:1.18.6-2^- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)Y]uA}Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)
cu!~Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B@- core: fix activation of ovs slaves after a service restart (rh #1733709)cbk_}Thomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)
r fu ~Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [- ovs: allow changing mac address of bridges and interfaces (rh #1740557)Beu~Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]@- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)
dk-~Thomas Haller <thaller@redhat.com> - 1:1.18.4-1]- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)
. . Ikk+~Thomas Haller <thaller@redhat.com> - 1:1.18.8-1^@- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.ju-~Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)aiuS~Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^- Update translations (rh #1796852)-hks~Thomas Haller <thaller@redhat.com> - 1:1.18.6-2^- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)YguA~Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)
`m[iSumit Bose <sbose@redhat.com> - 0.8.1-8\@- Various updates for RHEL-7.7
- many adcli-krb5-????? directories are created /tmp [#1588596]
- adcli exports kerberos ticket with old kvno [#1642546]
- [RFE] Have `adcli join` work without FQDN in `hostname` output [#1595911]
- Improve handling of service principals [#1644311]
- [RFE] adcli command with --unix-* options doesn't update
values in UnixAttributes Tab for user [#1337489]
- [RFE] adcli join should preserve SPN added by adcli preset-computer [#1630187]
- [RFE] Need an option for adcli command which will show domain join status. [#1622583]clk_~Thomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)
f s,W; f D
3d9697b9d1df6afe1e6f7753c817927e77aab45d8ae4e6b00aab690614c170a3D
27b3a6d5e1c664607297b18087e7b61c8f79281dcd08b501d6a4a98d0f06ccc1D
2eebe28ab1f164eeb8573869c86de47b750d8a043f1b3897566fe0753003f2a4D
43e5f421e8e3c2fe23f7a93bd002c12ec11faf3194b342d07ee3a9f9fb37a875D
dc1ec1c4e74af368428ce982615f87d7121b8baea33bec02313d1f3b501a036eD
892fa4df2150169a5c8680af75e4e63f2ffbf5ca0f9dafb19d1928769a5769b9D
e291f44f4466940d2b21380d3d68e50016685dad9868bd9563a304233da7eca0D
da160f160c233fe77d6e2113aad1a189ed766c41fc8254b49f764306d9538dc9D
b8b4286c072a6e2914a35c1f9d77c2d2f6fc910361424e0fd362363d7d5d74a7D
82e901dcdc6ecc6088013e726925ea0a208b449014b09f844465ad5d7b305805D
f7e3acc601ed8b9698fbc58cf297b2ad5a49ead168e515f329e2d95f3cd8083dD
e00e4e27e76a7ce874a947e6df6282be03c80787552e9101d00197dc467c0182D
db29a04632a66bb63dd0b015dea1aadce0cd2e22371225ebfeec0ec5dec16c02
- OV - r]ESumit Bose <sbose@redhat.com> - 0.8.1-13^ @- adcli should be able to Force LDAPS over 636 with AD Access Provider w.r.t sssd [#1786776]q]KSumit Bose <sbose@redhat.com> - 0.8.1-12]o@- adcli info should send netlogin pings to all domain controllers, not only a subset [#1685138]up]Sumit Bose <sbose@redhat.com> - 0.8.1-11]e@- Fixes and improvements for RHEL-7.8
- Issue is that with arcfour-hmac as first encryption type in the config ... [#1683745]
- adcli update --add-samba-data does not work as expected [#1738573]#o]mSumit Bose <sbose@redhat.com> - 0.8.1-10]QT- adcli is failing with "Couldn't add keytab entries: FILE:/etc/krb5.keytab:
Cannot allocate memory" [1665162]n[5Sumit Bose <sbose@redhat.com> - 0.8.1-9\- Fixes for RHEL-7.7 updates
- additional patch for [RFE] adcli join should preserve SPN added by adcli
preset-computer [#1630187]
- new patches for many adcli-krb5-????? directories are created /tmp [#1588596]
( w Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.15.1-5Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildVvaQSumit Bose <sbose@redhat.com> - 0.8.1-16.1_A- add missing patch for [#1871436]u]+Sumit Bose <sbose@redhat.com> - 0.8.1-16_@- adcli: couldn't connect to KEYRING:persistent:0:krb_ccache_jgrrBI8 [#1871436]t]5Sumit Bose <sbose@redhat.com> - 0.8.1-15^(@- More fixes for RHEL-7.9
- No longer able to delete computer from AD using adcli [#1840752]
- adcli: presetting $computer in $domain domain failed: Cannot set computer
password: Authentication error [#1762633]js]{Sumit Bose <sbose@redhat.com> - 0.8.1-14^=@- Fixes for RHEL-7.9
- Update' adcli update --add-samba-data ' info under correct section in man adcli [#1774622]
- [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1802258]
s Qe s c~gc Radovan Sroka <rsroka@redhat.com> - 0.15.1-12X- RHEL 7.4 ERRATUM
Resolves: rhbz#1377215}m% Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-11W@- Corrected typos in the default configuration file
Resolves: rhbz#1304334)|mg Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-10Wm - Updated the default configuration file. New defaults contributed
by Steve Grubb.
Resolves: rhbz#1304334{kM Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-9Su- Don't require prelink on aarch64 and ppc64le
Resolves: rhbz#1078555
Resolves: rhbz#1125462Mz_? Daniel Mach <dmach@redhat.com> - 0.15.1-8RU- Mass rebuild 2014-01-24My_? Daniel Mach <dmach@redhat.com> - 0.15.1-7Rk- Mass rebuild 2013-12-27+xkm Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-6R|@- warn if processing prelinked binary objects and the prelink binary
is not available
Resolves: rbhz#1004826
T #ms T b_i Honza Horak <hhorak@redhat.com> - 1.5.2-5Rx@- Rebuild for mariadb-libs
Related: #1045013L]? Daniel Mach <dmach@redhat.com> - 1.5.2-4Rk- Mass rebuild 2013-12-27h_u Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q- do not build with freetds when it is not availableF[5 Joe Orton <jorton@redhat.com> - 1.5.2-2Qd- update for aarch64C[/ Joe Orton <jorton@redhat.com> - 1.5.2-1Qd- update to 1.5.2hcq Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q@- Apply private patch from Merge Review BZ 225254.^_a Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7PM@- ensure we use latest libdb5 (not libdb4)R[M Joe Orton <jorton@redhat.com> - 1.4.1-6P@- use -lldap_r instead of -lldapt e Radovan Sroka <rsroka@redhat.com> - 0.15.1.1a@- backported fix for CVE-2021-45417
resolves: rhbz#2041952cgc Radovan Sroka <rsroka@redhat.com> - 0.15.1-13X@- RHEL 7.4 ERRATUM
Resolves: rhbz#1400548
I bh I b_i Honza Horak <hhorak@redhat.com> - 1.5.2-5Rx@- Rebuild for mariadb-libs
Related: #1045013L]? Daniel Mach <dmach@redhat.com> - 1.5.2-4Rk- Mass rebuild 2013-12-27h_u Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q- do not build with freetds when it is not availableF[5 Joe Orton <jorton@redhat.com> - 1.5.2-2Qd- update for aarch64C[/ Joe Orton <jorton@redhat.com> - 1.5.2-1Qd- update to 1.5.2h
cq Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q@- Apply private patch from Merge Review BZ 225254.^ _a Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7PM@- ensure we use latest libdb5 (not libdb4)R [M Joe Orton <jorton@redhat.com> - 1.4.1-6P@- use -lldap_r instead of -lldap
o= Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
in the apr_base64L ]? Daniel Mach <dmach@redhat.com> - 1.5.2-6RU- Mass rebuild 2014-01-24
I bh I b _i Honza Horak <hhorak@redhat.com> - 1.5.2-5Rx@- Rebuild for mariadb-libs
Related: #1045013L]? Daniel Mach <dmach@redhat.com> - 1.5.2-4Rk- Mass rebuild 2013-12-27h_u Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q- do not build with freetds when it is not availableF[5 Joe Orton <jorton@redhat.com> - 1.5.2-2Qd- update for aarch64C[/ Joe Orton <jorton@redhat.com> - 1.5.2-1Qd- update to 1.5.2hcq Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q@- Apply private patch from Merge Review BZ 225254.^_a Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7PM@- ensure we use latest libdb5 (not libdb4)R[M Joe Orton <jorton@redhat.com> - 1.4.1-6P@- use -lldap_r instead of -lldapo= Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
in the apr_base64L]? Daniel Mach <dmach@redhat.com> - 1.5.2-6RU- Mass rebuild 2014-01-24
I bh I b&_i Honza Horak <hhorak@redhat.com> - 1.5.2-5Rx@- Rebuild for mariadb-libs
Related: #1045013L%]? Daniel Mach <dmach@redhat.com> - 1.5.2-4Rk- Mass rebuild 2013-12-27h$_u Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q- do not build with freetds when it is not availableF#[5 Joe Orton <jorton@redhat.com> - 1.5.2-2Qd- update for aarch64C"[/ Joe Orton <jorton@redhat.com> - 1.5.2-1Qd- update to 1.5.2h!cq Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q@- Apply private patch from Merge Review BZ 225254.^ _a Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7PM@- ensure we use latest libdb5 (not libdb4)R [M Joe Orton <jorton@redhat.com> - 1.4.1-6P@- use -lldap_r instead of -lldap o= Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
in the apr_base64L ]? Daniel Mach <dmach@redhat.com> - 1.5.2-6RU- Mass rebuild 2014-01-24
I bh I b0_i Honza Horak <hhorak@redhat.com> - 1.5.2-5Rx@- Rebuild for mariadb-libs
Related: #1045013L/]? Daniel Mach <dmach@redhat.com> - 1.5.2-4Rk- Mass rebuild 2013-12-27h._u Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q- do not build with freetds when it is not availableF-[5 Joe Orton <jorton@redhat.com> - 1.5.2-2Qd- update for aarch64C,[/ Joe Orton <jorton@redhat.com> - 1.5.2-1Qd- update to 1.5.2h+cq Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q@- Apply private patch from Merge Review BZ 225254.^*_a Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7PM@- ensure we use latest libdb5 (not libdb4)R)[M Joe Orton <jorton@redhat.com> - 1.4.1-6P@- use -lldap_r instead of -lldap(o= Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
in the apr_base64L']? Daniel Mach <dmach@redhat.com> - 1.5.2-6RU- Mass rebuild 2014-01-24
I bh I b:_i Honza Horak <hhorak@redhat.com> - 1.5.2-5Rx@- Rebuild for mariadb-libs
Related: #1045013L9]? Daniel Mach <dmach@redhat.com> - 1.5.2-4Rk- Mass rebuild 2013-12-27h8_u Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q- do not build with freetds when it is not availableF7[5 Joe Orton <jorton@redhat.com> - 1.5.2-2Qd- update for aarch64C6[/ Joe Orton <jorton@redhat.com> - 1.5.2-1Qd- update to 1.5.2h5cq Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q@- Apply private patch from Merge Review BZ 225254.^4_a Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7PM@- ensure we use latest libdb5 (not libdb4)R3[M Joe Orton <jorton@redhat.com> - 1.4.1-6P@- use -lldap_r instead of -lldap2o= Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
in the apr_base64L1]? Daniel Mach <dmach@redhat.com> - 1.5.2-6RU- Mass rebuild 2014-01-24
I bh I bD_i Honza Horak <hhorak@redhat.com> - 1.5.2-5Rx@- Rebuild for mariadb-libs
Related: #1045013LC]? Daniel Mach <dmach@redhat.com> - 1.5.2-4Rk- Mass rebuild 2013-12-27hB_u Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q- do not build with freetds when it is not availableFA[5 Joe Orton <jorton@redhat.com> - 1.5.2-2Qd- update for aarch64C@[/ Joe Orton <jorton@redhat.com> - 1.5.2-1Qd- update to 1.5.2h?cq Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q@- Apply private patch from Merge Review BZ 225254.^>_a Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7PM@- ensure we use latest libdb5 (not libdb4)R=[M Joe Orton <jorton@redhat.com> - 1.4.1-6P@- use -lldap_r instead of -lldap<o= Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
in the apr_base64L;]? Daniel Mach <dmach@redhat.com> - 1.5.2-6RU- Mass rebuild 2014-01-24
I bh I bN_i Honza Horak <hhorak@redhat.com> - 1.5.2-5Rx@- Rebuild for mariadb-libs
Related: #1045013LM]? Daniel Mach <dmach@redhat.com> - 1.5.2-4Rk- Mass rebuild 2013-12-27hL_u Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q- do not build with freetds when it is not availableFK[5 Joe Orton <jorton@redhat.com> - 1.5.2-2Qd- update for aarch64CJ[/ Joe Orton <jorton@redhat.com> - 1.5.2-1Qd- update to 1.5.2hIcq Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q@- Apply private patch from Merge Review BZ 225254.^H_a Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7PM@- ensure we use latest libdb5 (not libdb4)RG[M Joe Orton <jorton@redhat.com> - 1.4.1-6P@- use -lldap_r instead of -lldapFo= Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
in the apr_base64LE]? Daniel Mach <dmach@redhat.com> - 1.5.2-6RU- Mass rebuild 2014-01-24
I bh I bX_i Honza Horak <hhorak@redhat.com> - 1.5.2-5Rx@- Rebuild for mariadb-libs
Related: #1045013LW]? Daniel Mach <dmach@redhat.com> - 1.5.2-4Rk- Mass rebuild 2013-12-27hV_u Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q- do not build with freetds when it is not availableFU[5 Joe Orton <jorton@redhat.com> - 1.5.2-2Qd- update for aarch64CT[/ Joe Orton <jorton@redhat.com> - 1.5.2-1Qd- update to 1.5.2hScq Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q@- Apply private patch from Merge Review BZ 225254.^R_a Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7PM@- ensure we use latest libdb5 (not libdb4)RQ[M Joe Orton <jorton@redhat.com> - 1.4.1-6P@- use -lldap_r instead of -lldapPo= Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
in the apr_base64LO]? Daniel Mach <dmach@redhat.com> - 1.5.2-6RU- Mass rebuild 2014-01-24
I bh I bb_i Honza Horak <hhorak@redhat.com> - 1.5.2-5Rx@- Rebuild for mariadb-libs
Related: #1045013La]? Daniel Mach <dmach@redhat.com> - 1.5.2-4Rk- Mass rebuild 2013-12-27h`_u Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q- do not build with freetds when it is not availableF_[5 Joe Orton <jorton@redhat.com> - 1.5.2-2Qd- update for aarch64C^[/ Joe Orton <jorton@redhat.com> - 1.5.2-1Qd- update to 1.5.2h]cq Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q@- Apply private patch from Merge Review BZ 225254.^\_a Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7PM@- ensure we use latest libdb5 (not libdb4)R[[M Joe Orton <jorton@redhat.com> - 1.4.1-6P@- use -lldap_r instead of -lldapZo= Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
in the apr_base64LY]? Daniel Mach <dmach@redhat.com> - 1.5.2-6RU- Mass rebuild 2014-01-24
I bh I bl_i Honza Horak <hhorak@redhat.com> - 1.5.2-5Rx@- Rebuild for mariadb-libs
Related: #1045013Lk]? Daniel Mach <dmach@redhat.com> - 1.5.2-4Rk- Mass rebuild 2013-12-27hj_u Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q- do not build with freetds when it is not availableFi[5 Joe Orton <jorton@redhat.com> - 1.5.2-2Qd- update for aarch64Ch[/ Joe Orton <jorton@redhat.com> - 1.5.2-1Qd- update to 1.5.2hgcq Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q@- Apply private patch from Merge Review BZ 225254.^f_a Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7PM@- ensure we use latest libdb5 (not libdb4)Re[M Joe Orton <jorton@redhat.com> - 1.4.1-6P@- use -lldap_r instead of -lldapdo= Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
in the apr_base64Lc]? Daniel Mach <dmach@redhat.com> - 1.5.2-6RU- Mass rebuild 2014-01-24
n rse Tomáš Mráz <tmraz@redhat.com> - 3.1.13-20U- build the package with hardening flags (PIE, full RELRO)sre Tomáš Mráz <tmraz@redhat.com> - 3.1.13-18T.- filter environment variables not acceptable in bash inputNqa? Daniel Mach <dmach@redhat.com> - 3.1.13-17RU- Mass rebuild 2014-01-24@p{ Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-16RΏ@- the correct solution is remove smp_flags, they don't work properly on ppc with
the option mpower7
- Related: rhbz#1048745o{) Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-15Rʚ- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745no= Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
in the apr_base64Lm]? Daniel Mach <dmach@redhat.com> - 1.5.2-6RU- Mass rebuild 2014-01-24
e r+V: e D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] U ] y{) Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-15Rʚ- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745`xe_ Jan Staněk <jstanek@redhat.com> - 3.1.13-25b - re-import selinux support from upstreamOwe= Tomáš Mráz <tmraz@redhat.com> - 3.1.13-24[W- log the jobs being runve Tomáš Mráz <tmraz@redhat.com> - 3.1.13-23Yo@- fix the ownership of the spool directory (#1414228)
- document the -n option of atd (#739870)
- fix handling of the aborted jobs (due to possibly
temporary conditions) and avoid flooding the sysloghueo Tomáš Mráz <tmraz@redhat.com> - 3.1.13-22WB- SIGPIPE should not be ignored in atd (#1338039)eteg Tomáš Mráz <tmraz@redhat.com> - 3.1.13-21Wo@- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
to fix bogus syslog messages
<u heo Tomáš Mráz <tmraz@redhat.com> - 3.1.13-22WB- SIGPIPE should not be ignored in atd (#1338039)e~eg Tomáš Mráz <tmraz@redhat.com> - 3.1.13-21Wo@- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
to fix bogus syslog messagesr}e Tomáš Mráz <tmraz@redhat.com> - 3.1.13-20U- build the package with hardening flags (PIE, full RELRO)s|e Tomáš Mráz <tmraz@redhat.com> - 3.1.13-18T.- filter environment variables not acceptable in bash inputN{a? Daniel Mach <dmach@redhat.com> - 3.1.13-17RU- Mass rebuild 2014-01-24@z{ Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-16RΏ@- the correct solution is remove smp_flags, they don't work properly on ppc with
the option mpower7
- Related: rhbz#1048745
b F b tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialogu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode`e_ Jan Staněk <jstanek@redhat.com> - 3.1.13-25b - re-import selinux support from upstreamOe= Tomáš Mráz <tmraz@redhat.com> - 3.1.13-24[W- log the jobs being run e Tomáš Mráz <tmraz@redhat.com> - 3.1.13-23Yo@- fix the ownership of the spool directory (#1414228)
- document the -n option of atd (#739870)
- fix handling of the aborted jobs (due to possibly
temporary conditions) and avoid flooding the syslog
x ~ w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS
1 '(H 1 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU
w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` Uw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialogu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~ w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 'u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
&u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t%uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf$u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858#u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt"uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU!w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` U,w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog+u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode*gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~)w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm(ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~4w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm3ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black2u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
1u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t0uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf/u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858.u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt-uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 ;u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
:u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t9uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf8u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168587u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt6uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU5w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` U@w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog?u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode>gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~=w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm<ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~Hw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormGui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackFu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Eu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tDuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfCu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Bu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStAuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 Ou Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Nu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tMuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfLu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Ku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStJuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUIw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` UTw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialogSu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeRgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Qw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormPui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~\w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm[ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackZu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Yu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tXuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfWu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Vu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStUuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 cu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
bu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tauw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf`u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858_u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt^uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU]w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` Uhw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialoggu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modefgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ew Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormdui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~pw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormoui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacknu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
mu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tluw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfku[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858ju Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStiuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
e r+V: e D%
81673643543357b7e306b0565d82bcd642537fefb2eb0244c2dc8b1dbe481c2bD$
7a7b265708dca056a11cfae6ae29db41405f54311ecc3a62636751d2e8044546D#
5530c892f1f2952996a03043005582fd05142b2402c3d3ba2d871149e6f6b902D"
cb353d5c74471de09be7e0fd09fe8cc300e96b28268cedc2c0c08e286daf5f95D!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 '(H 1 wu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
vu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresftu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858su Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStruw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUqw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` U|w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog{u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modezgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~yw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormxui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858~u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt}uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` Uw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialogu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~
w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` U$w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog#u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode"gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~!w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~,w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm+ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black*u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
)u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t(uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf'u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858&u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt%uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 3u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
2u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t1uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf0u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858/u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt.uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU-w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` U8w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog7u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode6gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~5w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm4ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~@w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm?ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black>u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
=u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t<uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf;u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858:u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt9uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 Gu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Fu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tEuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfDu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Cu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStBuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUAw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` ULw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialogKu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeJgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Iw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormHui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~Tw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormSui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackRu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Qu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tPuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfOu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Nu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStMuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 [u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Zu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tYuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfXu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Wu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStVuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` U`w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog_u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode^gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~]w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm\ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~hw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormgui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackfu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
eu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tduw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfcu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858bu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStauw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 ou Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
nu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tmuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresflu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858ku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStjuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUiw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` Utw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialogsu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modergI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~qw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormpui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
e r+V: e D2
40e08209c8de5003d4423a0ad7ed9c6b0f8180f4ac00c11d42d96a7a5069ebdbD1
0dafa08f6f467ecca9fd5fafad09fcd5cac9b1f2f050f88329a90f3434c52078D0
cfeadf715a776582bc168121a31f85069becc17f2556be2c3ea11c7d6040209dD/
6d1d56332454173cddc2595690e7c56c35decdfd2263853829c0fd32e430c247D.
3525be93a809d42aa8d6b8563d5762f4fd6f25a1b228b65589656a65c2bbba4aD-
e638dd51d9159ae8157653edb26aaf106eb560ae53f15fb80efa319e41e729b6D,
29938eb53cc7e9d2d0198a3a51f899d7a6d63659353fc78aac0dd24310a2cd39D+
dd33037be3199f5576c54b56155a6558f0ffc24162964a2a3f1e2dd0be0681c8D*
a1186ec734eb9834a2715c84b38c55a5efc049d49063deb03d006c6cbc9dd48cD)
0ddc672fbbf22b385a04e5922c34037d8950a75fb1cd0527f909bcc1783abb9fD(
46604e7e63c82851d300be853fd43bec9f863d6c14a9a404185a9c0fe6b88932D'
cfeef0c73c66033047dc4cf15b633dace6008e084cb069e2c95d1c60abffd496D&
04c1cb44a333186da972033dd6cf11d36780a1631c165568ae8099544c2c1543
!
~|w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm{ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackzu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
yu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849txuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfwu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858vu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt~uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU}w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` Uw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialogu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858
u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` U w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialogu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~$w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm#ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black"u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
!u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 +u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
*u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t)uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf(u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858'u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt&uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU%w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` U0w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog/u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode.gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~-w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm,ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~8w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm7ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black6u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
5u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t4uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf3u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168582u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt1uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 ?u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
>u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t=uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf<u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858;u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt:uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU9w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` UDw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialogCu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeBgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Aw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm@ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~Lw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormKui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackJu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Iu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tHuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfGu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Fu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStEuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 Su Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Ru' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tQuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfPu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Ou Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStNuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUMw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` UXw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialogWu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeVgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Uw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormTui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~`w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm_ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black^u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
]u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t\uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf[u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Zu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStYuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 gu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
fu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849teuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfdu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858cu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStbuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUaw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog of flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| x; y@ zH {O |T }\ ~c h p w | $ , 3 8 @ G L T [ ` h o t | $ + 0 8 ? D L S X ` g l t { # ( 0 7 < D K P X _ d l s x Ï ď ŏ Ə Ǐ( ȏ/ ɏ4 ʏ< ˏC ̏H ͏P ΏW Ϗ\ Џd яk ҏp ӏx Տ א ؐ ِ ې ܐ ݐ% ߐ( - 4 : A H N U \ b i p v }
` Ulw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialogku- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modejgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~iw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormhui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~tw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormsui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackru Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
qu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tpuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfou[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858nu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStmuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
e r+V: e D?
53cf10100297e3ee9624975cc473fc78d64bd6ad2a0106e1e5fd695e76c2ce9cD>
334cdf2e5acff8ba4421fc51d46210b1cc6cca7070a3a55c0b71135ea842a3c7D=
cda41b361d863ac2471e67f30a37dfa1d776eb1ecdfd24b6d620d454ea726cf4D<
e55f24cd7b3be8300c44b260f1159a66b99a1775ff2fe6134024d8c234f14559D;
0184b3c53d99c0d7a743fc2eefaec2158d3ccddc254688d6b5fed77bcdaf78d0D:
39ac208f2aaeedee724d09ffc9d779294a7721cd83807bbda081d0114bd94acdD9
fad6c8c1ae7000eeba2040a8163e5cc4920ac0d48ff08d1634dbe24df69b112dD8
5b0b31c3c4aa723f9a677d0ccaea58da6ec37710d6177cb930b490c716240bf8D7
be0ce9e4ff4bdfae6a6868243b708bb09deb84a5401d6d59e749b0aa376ff432D6
5d2375f20cc25e073efba76f4aeff505ebc4d30019f64ff6c16696cf30c075d2D5
11d3ec6a7cbf0f5ab4a611abed3a8e577bdb9e6c35243dff95e929892554069cD4
64701408bd6314de93c364f1b1a6d1f58f607d97f62aed713456040f9a7d6a21D3
7b8ac8b33b435a9814ec099de17eab143568599d591c4426da4cffcce26808a6
1 '(H 1 {u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
zu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tyuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfxu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858wu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStvuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUuw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` U w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialogu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~}w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm|ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t
uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt
uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` Uw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialogu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~ w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 #u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
"u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t!uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` U(w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog'u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode&gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~%w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm$ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~0w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm/ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black.u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
-u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t,uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf+u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858*u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt)uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 7u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
6u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t5uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf4u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168583u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt2uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU1w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` U<w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog;u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode:gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~9w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm8ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~Dw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormCui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackBu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Au' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t@uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf?u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858>u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt=uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 Ku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Ju' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tIuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfHu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Gu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStFuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUEw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` UPw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialogOu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeNgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Mw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormLui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~Xw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormWui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackVu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Uu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tTuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfSu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Ru Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStQuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 _u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
^u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t]uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf\u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858[u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStZuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUYw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` Udw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialogcu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modebgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~aw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm`ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~lw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormkui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackju Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
iu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849thuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfgu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858fu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSteuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 su Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
ru' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tquw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfpu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858ou Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStnuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUmw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` Uxw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialogwu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modevgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~uw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormtui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
e r+V: e DL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@
31678e32384951f2d0803f480a17916c8967a20bfa4c0a7b627436b112c717fd
!
~ w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black~u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
}u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t|uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf{u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858zu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStyuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` U w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode
gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt
uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` U w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~(w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm'ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black&u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
%u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t$uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf#u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858"u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt!uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 /u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
.u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t-uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf,u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858+u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt*uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU)w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` U4w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog3u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode2gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~1w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm0ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~<w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm;ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black:u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
9u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t8uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf7u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168586u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt5uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 Cu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Bu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tAuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf@u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858?u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt>uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU=w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` UHw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialogGu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeFgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Ew Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormDui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~Pw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormOui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackNu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Mu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tLuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfKu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Ju Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStIuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 Wu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Vu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tUuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfTu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Su Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStRuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUQw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` U\w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog[u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeZgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Yw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormXui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~dw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormcui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackbu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
au' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t`uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf_u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858^u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt]uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 ku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
ju' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tiuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfhu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858gu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStfuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUew5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` Upw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialogou- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modengI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~mw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormlui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~xw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormwui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackvu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
uu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849ttuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfsu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858ru Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStquw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
e r+V: e DY
98c4c14b7a0910ce624cb7b36dfb871441e4dc7f083e2dc7b39b52dfce97238fDX
f023965895ca396ee7837ef741c80807f3fcd4e941fe9b021ef6476083832b31DW
2a3e32785639d588761d6bf2e56e7121d3b1a72e11b62d59b95a594bbfe19836DV
ac61f136dfa8ec37083c4218f10c4b90438fde96c223895a6e3d08660c0652f3DU
7cf9167bef9413a9b392bca9faff3196f5c05d3ec73a6d3e2429936ca11db4a3DT
9fe95cd53733c5ac4fb1ee1e907acf53ce9a1661cc2b2e83a473ca67ae9bfc46DS
5c57f76aba32a986317ac294945a789bd49f7cd09491d4a66c8c259b336a13dbDR
fbae91cfe9ae73876a8eeb3b715dacaef2f15103aae6c0a6040a7aec6578cc0dDQ
3ec6e9340959cede8f65ef85eb65d48800aad8e51db71b9f3bd47bed04cd9c3aDP
33aa69d7f9394b9a6d1d03cca5e79975ae42fc6d8a6d1794ebe7bfcf8d3bf01aDO
fb3f399c2cd3a00d11861039ba16df58c2d041ebce64824acdef0563df4d8ed8DN
a27a74e92715fbe40b9a7d67bedad0e62952307a43ea09eecd25aa1667294bd5DM
a93df30801aba8cea190c36d5bfa44f375fde46284080e1a7e93e5873bc75bb9
1 '(H 1 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
~u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t}uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf|u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858{u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStzuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUyw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
` Uw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialogu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
!
~ w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursor
1 '(H 1 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU
w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
h[w Ian Kent <ikent@redhat.com> - 5.0.7-109][- bz1728914 - getmntent returns additional "-hosts" entries when
automounter is used with "hosts" map
- fix missing initialization of autofs_point flags.
- Related: rhbz#1728914d[o Ian Kent <ikent@redhat.com> - 5.0.7-108]M`@- bz1728914 - getmntent returns additional "-hosts" e ڂgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black ntries when
automounter is used with "hosts" map
- remove unused function has_fstab_option().
- remove unused function reverse_mnt_list().
- remove a couple of old debug messages.
- fix amd entry memory leak.
- fix unlink_mount_tree() not umounting mounts.
- add ignore mount option.
- use ignore option for offset mounts as well.
- add config option for "ignore" mount option
- use bit flags for autofs mount types in mnt_list.
- use mp instead of path in mnt_list entries.
- always use PROC_MOUNTS to make mount lists.
- add glibc getmntent_r().
- use local getmntent_r in table_is_mounted().
- refactor unlink_active_mounts() in direct.c.
- don't use tree_is_mounted() for mounted checks.
- use single unlink_umount_tree() for both direct and indirect mounts.
- move unlink_mount_tree() to lib/mounts.c.
- use local_getmntent_r() for unlink_mount_tree().
- use local getmntent_r() in get_mnt_list().
- use local getmntent_r() in tree_make_mnt_list().
- Resolves: rhbz#1728914
NQ 9 [ Ian Kent <ikent@redhat.com> - 5.0.7-114^@- bz1847762 - automount program crashes with "malloc(): invalid next size
(unsorted)
- initialize struct addrinfo for getaddrinfo() calls.
- fix quoted string length calc in expandsunent().
- fix autofs mount options construction.
-Resolves: rhbz#1847762 [7 Ian Kent <ikent@redhat.com> - 5.0.7-113^A- Fix changelog revision for previous 2 commits.
- Related: rhbz#1806514 rhbz#1818664H[7 Ian Kent <ikent@redhat.com> - 5.0.7-112^@- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
- fix trailing dollar sun entry expansion.
- Resolves: rhbz#1818664![i Ian Kent <ikent@redhat.com> - 5.0.7-111^{G- bz1806514 - strictexpire option not set for offset mounts
- fix patch not applied.
- Related: rhbz#1806514.[ Ian Kent <ikent@redhat.com> - 5.0.7-110^{G- bz1806514 - strictexpire option not set for offset mounts
- also use strictexpire for offsets.
- Resolves: rhbz#1806514
q =P q [ iO Ian Kent <ikent@redhat.com> - 5.0.7-116el7_9.1c- bz2107752 - autofs: send FAIL cmd/ioctl mess when encountering problems
with mount trigger
- fix kernel mount status notification.
- Resolves: rhbz#2107752i [y Ian Kent <ikent@redhat.com> - 5.0.7-116_ A- bz1885511 - automount force unlink option (-F) does not work as expected
on autofs-5.0.7-109.el7
- fix incorrect logical compare in unlink_mount_tree().
- Related: rhbz#1885511? [% Ian Kent <ikent@redhat.com> - 5.0.7-115_ @- bz1885511 - automount force unlink option (-F) does not work as expected
on autofs-5.0.7-109.el7
- fix direct mount unlink_mount_tree() path.
- fix unlink mounts umount order.
- bz1858586 - autofs share doesn't mount when using nobind over RDMA where
nfs-server and nfs-client are the same systems
- mount_nfs.c fix local rdma share not mounting.
- Resolves: rhbz#1885511 rhbz#1858586
3% !%[i Ian Kent <ikent@redhat.com> - 5.0.7-111^{G- bz1806514 - strictexpire option not set for offset mounts
- fix patch not applied.
- Related: rhbz#1806514.$[ Ian Kent <ikent@redhat.com> - 5.0.7-110^{G- bz1806514 - strictexpire option not set for offset mounts
- also use strictexpire for offsets.
- Resolves: rhbz#1806514h#[w Ian Kent <ikent@redhat.com> - 5.0.7-109][- bz1728914 - getmntent returns additional "-hosts" entries when
automounter is used with "hosts" map
- fix missing initialization of autofs_point flags.
- Related: rhbz#1728914d"[o Ian Kent <ikent@redhat.com> - 5.0.7-108]M`@- bz1728914 - getmntent returns additional "-hosts" e ށI![9 Ian Kent <ikent@redhat.com> - 5.0.7-107]@1@- bz1734057 - automount segfaults if a bad hosts entry is added
in /etc/auto.master
- fix reset flex scan buffer on init.
- Resolves: rhbz#1734057 ntries when
automounter is used with "hosts" map
- remove unused function has_fstab_option().
- remove unused function reverse_mnt_list().
- remove a couple of old debug messages.
- fix amd entry memory leak.
- fix unlink_mount_tree() not umounting mounts.
- add ignore mount option.
- use ignore option for offset mounts as well.
- add config option for "ignore" mount option
- use bit flags for autofs mount types in mnt_list.
- use mp instead of path in mnt_list entries.
- always use PROC_MOUNTS to make mount lists.
- add glibc getmntent_r().
- use local getmntent_r in table_is_mounted().
- refactor unlink_active_mounts() in direct.c.
- don't use tree_is_mounted() for mounted checks.
- use single unlink_umount_tree() for both direct and indirect mounts.
- move unlink_mount_tree() to lib/mounts.c.
- use local_getmntent_r() for unlink_mount_tree().
- use local getmntent_r() in get_mnt_list().
- use local getmntent_r() in tree_make_mnt_list().
- Resolves: rhbz#1728914
k 4k 9([ Ian Kent <ikent@redhat.com> - 5.0.7-114^@- bz1847762 - automount program crashes with "malloc(): invalid next size
(unsorted)
- initialize struct addrinfo for getaddrinfo() calls.
- fix quoted string length calc in expandsunent().
- fix autofs mount options construction.
-Resolves: rhbz#1847762'[7 Ian Kent <ikent@redhat.com> - 5.0.7-113^A- Fix changelog revision for previous 2 commits.
- Related: rhbz#1806514 rhbz#1818664H&[7 Ian Kent <ikent@redhat.com> - 5.0.7-112^@- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
- fix trailing dollar sun entry expansion.
- Resolves: rhbz#1818664
4 =P 4 ]-5 Fabio Alessandro Locati <fale@fedoraproject.org> - 1.11.109-1YJ_- Update to 1.11.109[,3 Fabio Alessandro Locati <fale@fedoraproject.org> - 1.11.90-1Y$$@- Update to 1.11.90[+3 Fabio Alessandro Locati <fale@fedoraproject.org> - 1.11.63-1X,- Update to 1.11.63i*[y Ian Kent <ikent@redhat.com> - 5.0.7-116_ A- bz1885511 - automount force unlink option (-F) does not work as expected
on autofs-5.0.7-109.el7
- fix incorrect logical compare in unlink_mount_tree().
- Related: rhbz#1885511?)[% Ian Kent <ikent@redhat.com> - 5.0.7-115_ @- bz1885511 - automount force unlink option (-F) does not work as expected
on autofs-5.0.7-109.el7
- fix direct mount unlink_mount_tree() path.
- fix unlink mounts umount order.
- bz1858586 - autofs share doesn't mount when using nobind over RDMA where
nfs-server and nfs-client are the same systems
- mount_nfs.c fix local rdma share not mounting.
- Resolves: rhbz#1885511 rhbz#1858586
Q Q
4u' Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.23.2-1.1bq@- Rebase to 1.23.2 to fix issues with upgraded libs
Resolves: rhbz#207397953sy Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.14.28-5Z- Append python-botocore and python-jmespath bundled directory to
search path where needed
Resolves: rhbz#1509434p2sq Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.14.28-4Zz@- Bundle python-colorama
Resolves: rhbz#15094341sC Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.14.28-1Za- Update to 1.14.28
- Replace python-rsa with python-cryptography
Resolves: rhbz#1509434]05 Fabio Alessandro Locati <fale@fedoraproject.org> - 1.11.133-1Y?@- Update to 1.11.133/ Fedora Release Engineering <releng@fedoraproject.org> - 1.11.109-3Yx@- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild[.1 Fabio Alessandro Locati <fale@fedoraproject.org> - 1.11.109-2YJ_- Forgot to update
^." :w Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-31[@- Append '/' while tab completing directory names
Resolves: #14953989w Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-30Y- Check for multibyte characters in commands
Resolves: #14876158w Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-29Y@- Fix a pipe fd leak in process substitution
Resolves: #14732457aA Kamil Dudka <kdudka@redhat.com - 4.2.46-28X- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
Resolves: #14298386aQ Kamil Dudka <kdudka@redhat.com - 4.2.46-27X @- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
Resolves: #1426026 5wG Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-26XY- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
Resolves: #1379237
i[L AaA Kamil Dudka <kdudka@redhat.com - 4.2.46-28X- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
Resolves: #1429838@aQ Kamil Dudka <kdudka@redhat.com - 4.2.46-27X @- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
Resolves: #1426026 ?wG Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-26XY- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
Resolves: #1379237j>wa Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-35an@- Bump version number
Resolves: #2015565 =w! Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-34]V- BASH_CMD should not be writable in restricted shell
Resolves: #1693181|<w Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-33\- Add support for bracketed paste mode
Resolves: #1573901;w1 Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-32\@- Add configuration option for logging bash history to syslog
Resolves: #1160482
W ziS W jHwa Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-35an@- Bump version number
Resolves: #2015565 Gw! Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-34]V- BASH_CMD should not be writable in restricted shell
Resolves: #1693181|Fw Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-33\- Add support for bracketed paste mode
Resolves: #1573901Ew1 Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-32\@- Add configuration option for logging bash history to syslog
Resolves: #1160482Dw Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-31[@- Append '/' while tab completing directory names
Resolves: #1495398Cw Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-30Y- Check for multibyte characters in commands
Resolves: #1487615Bw Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-29Y@- Fix a pipe fd leak in process substitution
Resolves: #1473245
p ?M] p N Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0:5.2-15Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildOMm5 Tom Callaway <spot@fedoraproject.org> - 0:5.2-14P6@- Package NOTICE.txtlL]} Andy Grimm <agrimm@gmail.com> - 0:5.2-13P3x@- This package should not own _mavendepmapfragdir (RHBZ#850005)
- Build with maven, and clean up deprecated spec constructs
- Fix pom file (See http://jira.codehaus.org/browse/MEV-592)K Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0:5.2-12P@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildTJq; Gerard Ryan <galileo@fedoraproject.org> - 0:5.2-11O@- Inject OSGI Manifest.=Ii Ville Skyttä <ville.skytta@iki.fi> - 0:5.2-10O
y- Specify explicit source encoding to fix build with Java 7.
- Install jar and javadocs unversioned.
- Crosslink with JDK javadocs.
I f; I U Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0:5.2-12P@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildTTq; Gerard Ryan <galileo@fedoraproject.org> - 0:5.2-11O@- Inject OSGI Manifest.=Si Ville Skyttä <ville.skytta@iki.fi> - 0:5.2-10O
y- Specify explicit source encoding to fix build with Java 7.
- Install jar and javadocs unversioned.
- Crosslink with JDK javadocs.Ro9 Mikolaj Izdebski <mizdebsk@redhat.com> - 0:5.2-19c@- Fix arbitrary bytecode produced via out-of-bounds writing
- Resolves: CVE-2022-42920LQ]? Daniel Mach <dmach@redhat.com> - 05.2-18Rk- Mass rebuild 2013-12-27 Po Mikolaj Izdebski <mizdebsk@redhat.com> - 0:5.2-17Qz- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571Oo? Mikolaj Izdebski <mizdebsk@redhat.com> - 0:5.2-16Q- Complete spec file rewrite
- Build with Maven instead of Ant
- Remove manual subpackage
# \o9 Mikolaj Izdebski <mizdebsk@redhat.com> - 0:5.2-19c@- Fix arbitrary bytecode produced via out-of-bounds writing
- Resolves: CVE-2022-42920L[]? Daniel Mach <dmach@redhat.com> - 05.2-18Rk- Mass rebuild 2013-12-27 Zo Mikolaj Izdebski <mizdebsk@redhat.com> - 0:5.2-17Qz- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571Yo? Mikolaj Izdebski <mizdebsk@redhat.com> - 0:5.2-16Q- Complete spec file rewrite
- Build with Maven instead of Ant
- Remove manual subpackageX Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0:5.2-15Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildOWm5 Tom Callaway <spot@fedoraproject.org> - 0:5.2-14P6@- Package NOTICE.txtlV]} Andy Grimm <agrimm@gmail.com> - 0:5.2-13P3x@- This package should not own _mavendepmapfragdir (RHBZ#850005)
- Build with maven, and clean up deprecated spec constructs
- Fix pom file (See http://jira.codehaus.org/browse/MEV-592)
$ b{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)a{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)`{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d_wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t^wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z]{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
5 i{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)h{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)g{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)?f} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)e{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)md{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qc{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
p}! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)po}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)n}9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?m} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)l{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mk{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qj{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrf ?v} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)u{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mt{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qs{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistaker{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)q{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
b b]F b m}{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q|{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)zq Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)y}! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)px}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)w}9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
e r+V: e Df
664e7cfa4c02ab9121f80adbb03b0b47bb258e1ff0c45161da3208d48bf6750aDe
d6069d49f727f500878d2326ae170486edd57be2ead8d6aa3454e528b9d0cad7Dd
efe7ae6b25e582508f3ba41e0017ca4b0ffbec80692919abd79c1b54bbb43465Dc
18b2663b932253d1cd4199938857bde269a7f2c90665ff7782c334d88b68f7b7Db
42b68ad1d87236d5de03de1b7d591b6a993c1067b4bb54558ceaa48a68fff9e1Da
ecbe95651dc59d12d773005ad0f00df91c1b689c1ad0402467603a9ab799c2fbD`
7200ad28455e7f8044a9521a187ff712e7d782e9a38db84d1c18e9b54e7a9a28D_
1e67462d537e085a22099169bfc37a18a1e6f210a61839b9e0b229fcde3add6eD^
1edd338d1d20b130c1a107ea59652842ef0a8167393745468301105b2a59ca6dD]
76f7044e7f7cf0b257e3f983a0bb8457ed7e60c7c386096fd844e8a43f3614acD\
10a06eabffcd2d73d1de3fa1821108cbfe10fb4977603c9f495854984a91542bD[
958d635feece68e98a7942fb734aa2b1c79c887db56e57df5884c0a90afa291fDZ
e6f4e61f30e26ae0718f9ae0753c408d47f937201175fa1753774f9139b55f1c
x d x s Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)}! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220) }9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)~{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
r/ p
}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220) }9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178){7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
s# Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)
nZ xw} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)Hs Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
s# Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341) s Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828) }! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)
~ zy ~ g{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,wc Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){w Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rwq Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)w Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)
b b , wc Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){w Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rwq Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)w Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)twu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
V 2 V r#wq Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d"wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t!wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z {{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g {W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[ wC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase
{ ty { z){{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g({W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
'{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[&wC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,%wc Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){$w Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)
} " l }
0{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[/wC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,.wc Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){-w Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201),{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d+wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t*wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)
L !2 L [7wC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase6{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)5{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d4wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t3wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z2{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g1{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
o) >{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)={ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d<wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t;wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z:{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g9{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
8{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)
# ni # dEwU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tDwu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zC{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gB{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
A{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)q@{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake?{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
x^z gK{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken serversmJ{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qI{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeH{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)G{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)F{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
$ Q{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)P{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)O{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dNwU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tMwu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zL{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
X{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dWwU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tVwu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zU{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)T{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mS{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qR{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrf _{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)?^} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)]{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m\{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q[{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeZ{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)Y{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
xrf ?e} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)d{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mc{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qb{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakea{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)`{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
_ b]C _ ml{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qk{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakej{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)i{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)h}! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pg}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)f}9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
y d y rq Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)q}! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pp}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)o}9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?n} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)m{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
n+ py}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)x}9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?w} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)v{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mu{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qt{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakes{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
nZv ? } Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178){7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m~{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q}{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
|s# Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341){s Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)z}! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)
e r+V: e Ds
01af8dbfbd06ab846b1473d9c0c02a8f51af1a47c8d92957ff4e5508b3d647daDr
334b38af49e56e5f0435be05785e022ac744d9fb66965fc0b8baeec1fbc47653Dq
d1092d59f303a24817bad40a23bbaac2dcc1d56beef54c5d1c3d42e225090212Dp
12356c5566012c75f7cff8722dced224c1aa54d1c80a99482b0c3ec180432929Do
4b10b467e7f7d3c03d65a1978142de23e7d3b60c9c6729496eac6cd915d2e83cDn
42ff9328e94163ac1555369afb66d510954eee171420041d8a4d8bcf504fe3f8Dm
89bf5b84dc71e5ad5f0d9d9867283539d89d67b1aa0c88f54a59c8766c3d2351Dl
ae6ecf30bc0a1b8e2c0c2d8702e3eaf7db4864987e02a301446311ff1594d050Dk
58d55e76b88d088f5d397d7b1d908c6ffc3f06ec1ee82d97c1383fb167104aabDj
1a87cf953d16581b70a51f9c131f6f714e364e0a57dee8b2856b43aad7d89104Di
87690efabf1c1904d1640276e18c4a1568f33f6688bfde4c8352defdd62b25d4Dh
3f9569f5e76f2c85ea0b8843abaa2fe4d295bef235b8e3c6c65588c40bfbaad2Dg
badfc32e957614210eda392b71e458da964b3e66c2b8b1d7b457703c93fb8070
I b]I
s# Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)s Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)}! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
9> {
w Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r wq Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)w Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)xw} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)Hs Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
Pa twu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[ wC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase, wc Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
~ zy ~ g{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,wc Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){w Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rwq Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)w Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)
# $1 # [ wC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase, wc Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){ w Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rwq Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)dwU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
# o) # {%w Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)${ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d#wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t"wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z!{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g {W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)
Pa d,wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t+wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z*{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g){W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
({! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)['wC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,&wc Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
" x " t3wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z2{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g1{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
0{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[/wC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase.{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)-{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
g:{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
9{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)q8{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake7{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)6{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)5{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d4wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)
$ @{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)?{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)>{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d=wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t<wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z;{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
N = N G{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dFwU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tEwu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zD{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gC{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken serversmB{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qA{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
h xrf h zM{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)L{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mK{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qJ{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeI{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)H{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
" mT{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qS{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeR{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)Q{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)P{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dOwU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tNwu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)
= d, = Z{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dYwU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tXwu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zW{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)?V} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)U{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
xrf a{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)?`} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)_{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m^{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q]{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake\{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)[{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
xrf ?g} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)f{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)me{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qd{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakec{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)b{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
G b]M G qn{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakem{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)l{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)k{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)j}! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pi}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)h}9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
1 t}! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)ps}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)r}9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?q} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)p{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mo{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)
xrf ?z} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)y{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mx{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qw{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakev{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)u{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
J b]P J q{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake {# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)~q Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)}}! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p|}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220){}9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
e r+V: e D
9c36a1622791ce03d6ac94ea9fa499f523998938199fdd4b31677374da4a1118D
c19e37c8595f0a36840e5ffde24ba2022e36425cc814639db070930027e078abD~
5bc7e489f2286aea26973b124918a70b6f8f29e9936508ee68e5fa89b453002bD}
ee52c09ab7dca8a8e11fe87c0855b1ce38df1fdaef899e8ce50d80b72009b62bD|
5ea154c824570a42b00ec0dd66ecba1eb3ba53a7d8875b374a32bfc093aea76fD{
e27571469712e3c2e9c26aebde7261eee92c600cc19e6d3f6b1bc172f0234ab4Dz
5171be56dca06ca1e7da429b0b918c643f00522f432cfaa4d67aeea0ee796306Dy
f82ec6b5a321f21916898763958f2f66aa27af989f717611ee77da7475cd01dbDx
9440248086b43cdef2b59af7d4689cf4358b9549a0e882439813dcc84f72e359Dw
5d5eaf30c36d5edff16d10d59883fcd24b4d915f4f6a332fd0a4498d47a9abe2Dv
f41e3da0ff09a0dfcee4669524a544896ae845227cd61f6da9cf4fac362b2c63Du
e69d6d87e87eca926adc10baf1eeb4125ba0103b79977c638b305b870f7d2110Dt
fd7c147bd421d47e6afa077b39fee3edde95b7c1ad7a4371b4271f0aaea8ca13
1 }! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178){7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)
{ui ?
} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178) {7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m {c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q
{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake {# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)q Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)
C b]I C q{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
s# Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)s Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)}! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
1 }! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178){7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)
zxl ? } Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178) {7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m {c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q {k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
s# Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)s Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)
I b]I
%s# Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)$s Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)#}! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p"}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)!}9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
q @4 q ?*} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)){7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m({c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q'{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeH&s Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
I b]I
/s# Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341).s Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)-}! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p,}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)+}9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
9> {4w Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r3wq Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)2w Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)x1w} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)H0s Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers of fflrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| # ) 0 7 > E K Q X _ e l r y
% ,
3 : @
G M T Z a g n t z
% * / 4 ": #A $G %N &U '\ (c )i *p +w ,~ - /
0 1 2 3& 4- 53 69 7? 8F 9L :R ;Y <` =f >m ?s @y A B D E F G H$ I) J. K4 L; MA NH OO PV Q] Rc Sj Tq Ux V W Y
Z [ \ ]' ^- _3 `: a@ bF cM dT e[
Pa t:wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z9{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g8{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
7{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[6wC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,5wc Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
m \ m
A{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[@wC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,?wc Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){>w Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r=wq Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)<w Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)x;w} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)
!& {Gw Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rFwq Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)Ew Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)tDwu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zC{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gB{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Pa dNwU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tMwu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zL{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gK{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
J{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[IwC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,Hwc Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
~ zy ~ gU{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
T{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[SwC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,Rwc Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){Qw Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rPwq Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)Ow Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)
# $1 # [\wC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,[wc Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){Zw Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rYwq Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)dXwU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tWwu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zV{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
, o) , rcwq Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)b{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dawU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t`wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z_{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g^{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
]{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)
{ ty { zi{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gh{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
g{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[fwC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,ewc Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){dw Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)
} " l }
p{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[owC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,nwc Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){mw Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)l{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dkwU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tjwu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)
, !2 , {ww Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)v{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)u{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dtwU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tswu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zr{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gq{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Pa d~wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t}wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z|{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
z{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[ywC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,xwc Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
" x " twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase { Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
e r+V: e D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* % * g
{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[ wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebaseq
{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake {#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)
$ {#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
- - {Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)q{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrq g {WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)m {cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q {kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake {#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
$ &{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)%{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)${Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d#wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t"wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z!{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
N = N -{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d,wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t+wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z*{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g){WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken serversm({cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q'{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrf g3{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers2{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m1{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q0{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake/{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214).{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
$ 9{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)8{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)7{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d6wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t5wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z4{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
2 z 2 D?a)Tomas Krizek <tkrizek@redhat.com> - 11.1-1X,- update to letest upstream version
- resolves: #1393889 Rebase to bind-dyndb-ldap 11+
- resolves: #1165796 bind-dyndb-ldap crashes if server is shutting down and connection to LDAP is down
- resolves: #1413805 bind-dyndb-ldap default schema is shipped with syntax error>_)Petr Spacek <pspacek@redhat.com> - 10.0-5Wv@- resolves: #1376851 Unable to set named_write_master_zones boolean on upgrade|=_Petr Spacek <pspacek@redhat.com> - 10.0-4W @- resolves: #1366565 Deletion of DNS root zone breaks global forwarding<{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m;{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q:{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
H ] H |F_Stepan Broz <sbroz@redhat.com> - 11.1-7.1fM@- Rebuild required for BIND changes for KeyTrap change (CVE-2023-50387)Em9Alexander Bokovoy <abokovoy@redhat.com> - 11.1-7]o@- Fix attribute templating in case of a missing default value
- Resolves: rhbz#1748904=DePetr Menšík <pemensik@redhat.com> - 11.1-6\b@- Bump BIND version and fix library dependecies
- Rebuild for bind 9.11.3. Minor tweaks to compile.
- Support for bind 9.11.5 headersnCe{Petr Menšík <pemensik@redhat.com> - 11.1-5[ @- Resolves: #1580389 depend on bind with writeable homeBa#Tomas Krizek <tkrizek@redhat.com> - 11.1-4Yf@- Resolves: #1469563 required bind version doesn't have the dyndb interface
Aa;Tomas Krizek <tkrizek@redhat.com> - 11.1-3Y - resolves: #1436268 crash when server_id is not present in named.conf
- coverity fixesX@aSTomas Krizek <tkrizek@redhat.com> - 11.1-2X,- bump NVR to fix bind dependencies
$ L{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)K{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)J{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dIwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tHwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zG{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
H H tRwu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zQ{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)?P}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)O{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mN{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qM{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
w w Y{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mX{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qW{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeV{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)U{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)T{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dSwU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)
=-' `{7
Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m_{c
Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q^{k
Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake]{#
Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)\{
Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)[{
Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)?Z} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)
=, f{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)e{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d}!
Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pc}g
Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)b}9
Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?a}
Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)
n+ pm}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)l}9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?k} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)j{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mi{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qh{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeg{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
nTp s{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mr{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qq{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakep{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)o{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)n}! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)
=, y{
Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)xq Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)w}! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pv}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)u}9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?t} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)
n+ p }g
Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9
Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?~}
Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)}{7
Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m|{c
Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{{k
Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakez{#
Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
nWs {7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)q
Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)}!
Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)
e r+V: e D
620e6945f7639eacc1508005775c37d66e64ae3f5ec915e87d132a17a45d3999D
84515e054cf47fee3e466382e25e19eb92f6f9947741105ea5f6071f7fe18185D
b7958e30f90b1219e2202114385b2a92aa2271e3064f4b5e46ba9f99c2beeef9D
a9b560ad84f4c4da2302f2f1c1581df4d699c0e0f9cf0754e125b2bab6ea4795D
28d32718cac59baf9c4162573d291af2345e664d16de912661fa18de7157ca63D
e0386a64a095ddfdf29e498080b5d77f7bb681d49c55cf461188e3263c1ab429D
94b92924f85680ecbc45ab163f775966e4511c2f9885c4c80f5e90d414a6b7edD
92aef4b8e3ee011c2535abd3662b5231c16dfc9b45c3e7649a1a6b3355518f1bD
7a15e89049ae929f16d7970980522d53b696c61a5d5ce15d47c614ac40e4e05cD
69c9b42984d2a52a135360b34ce4482f7f1f7c83bcdc685dbc6cc7db28136840D
472dfbe984defab2da4d391865a8dad49409470d075bba14d4c3b8ed3ece9e0dD
43e92b9290406137c9b3c56768f3269a089b338a410de4e2879c249fd794ac2bD
330b8ae0aa3720eeebeb9d9321a83a407e356101f5d7cb524b333e0a138ceb96
=,
s#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341) sStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)
}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p }gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)
n+ p}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178){7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
nZv ?}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178){7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
s#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)sStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)
I b]I
s#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341) sStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828) }!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p }gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
q @4 q ?$}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)#{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m"{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q!{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeH s Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
I b]I
)s#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)(sStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)'}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p&}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)%}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
9> {.wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r-wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589),wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)x+w}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)H*s Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
Pa t4wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z3{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g2{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
1{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[0wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,/wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
m \ m
;{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[:wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,9wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){8wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r7wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)6wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)x5w}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)
!& {AwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r@wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)?wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)t>wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z={{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g<{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Pa dHwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tGwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zF{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gE{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
D{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[CwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,BwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
~ zy ~ gO{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
N{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[MwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,LwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){KwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rJwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)IwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)
# $1 # [VwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,UwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){TwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rSwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)dRwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tQwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zP{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
, o) , r]wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)\{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d[wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tZwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zY{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gX{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
W{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)
{ ty { zc{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gb{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
a{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[`wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,_wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){^wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)
} " l }
j{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[iwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,hwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){gwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)f{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dewUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tdwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)
, !2 , {qwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)p{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)o{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dnwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tmwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zl{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gk{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Pa dxwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zv{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gu{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
t{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[swCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,rwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
" x " twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z~{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g}{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
|{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[{wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebasez{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)y{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
* % * g{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebaseq{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)
e r+V: e D'
9a5fa14360c626a157114ece6ad7b3186a9d13ffe35b54f68fab1678618a929dD&
b822a9890f5063ab0234ba6cf91bd64b1adc0c4e2f854176b9b00a76b414ca7eD%
5b81f0de16b9e09141c5ea31f902a18f54277c2e168b86007146e71b8f29b163D$
36ae65670b57a81f320f0e21426f30d359715f401c51ab27568393a36e6d75aaD#
60b33a8a989840613908660e2204def7a4fe9b0d9cbcdf16e46b65bfc1c9bb2cD"
f3e24a8285c55480cfef6e63c976be0f143c1010b3511cdb0c8f2bc86dd82ef4D!
b9d806c4557aff349da1d626e32967c4202becbc72147a2c93ba8a440c08995cD
ef26f87d833891a36ec1eeac1cbd5de9be6729295a8243544f11a26a7e28373aD
bd09bb37e73e22a5b20339a2eafaa7a10698dd1ebf5a8bf4c187d59b68d06a60D
56cdf3051f5fd87ff809ab1843192abe235c6093bc0a83213f73bb7ebe2a0f2aD
e87be7552176482fd5e981021e62d2dab6c7950108f44af47af3d68b9fa442a8D
e8843e39d98b4c77a9cab62b23793b825c2c78175ae84da344250acedf05778eD
ddbc53b44a7ec6dd175840df4ba96e8440a167aca06195e38f9ce8e768f82f30
$
{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) {Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215) {Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d
wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
- - { Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)q{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrq g{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)m{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
$ {# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) { Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215) { Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
N = N '{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d&wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t%wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z${{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g#{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken serversm"{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q!{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrf g-{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers,{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m+{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q*{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake){# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)({ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
$ 3{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)2{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)1{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d0wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t/wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z.{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
:{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d9wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t8wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z7{{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)6{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m5{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q4{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrf ?@} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)?{7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m>{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q={k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake<{# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214);{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
$ F{#!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)E{!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)D{!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dCwU!Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tBwu!Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zA{{!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
5 M{#"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)L{"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)K{"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)?J}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)I{7!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mH{c!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qG{k!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
T}!"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pS}g"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)R}9"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?Q}"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)P{7"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mO{c"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qN{k"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
x^z ?[}#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)Z{7#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mY{c#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qX{k#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeW{##Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)V{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)U{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
_ b]C _ mb{c$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qa{k$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake`{#$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)_{$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)^}!#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p]}g#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)\}9#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
y d y hq$Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)g}!$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pf}g$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)e}9$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?d}$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)c{7$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
xrf ?n}%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)m{7%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)ml{c%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qk{k%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakej{#%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)i{%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
b b]F b mu{c&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qt{k&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakes{#&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)rq%Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)q}!%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pp}g%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)o}9%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
x d x {s&Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)z}!&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)py}g&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)x}9&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?w}&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)v{7&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
rl` ?}'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178) {7'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{c'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q~{k'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake}{#'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
|s#&Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)
e b]I e m{c(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{k(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
s#'Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)s'Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)}!'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p}g'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
e r+V: e D4
e08149c8f4894437d1cb9d2b60f6771c7922cc3b83c5f92705e75f509b048115D3
5af6b82a47585513d5a6a8ccc974d524ebc2a67fba642652aa75b566045b004cD2
d1270ff691bc97bc9a737c8556081408a04f2a325ffb0db2fb561a7add15d0e6D1
64c82c743b0aa34d2ad89724607562e8cf196bdaec58dcfd940a8f728ce9c754D0
e9c3f41aecb56447424691a9aedff1c7449cb17f5a1e759c6f7c7c089b2d1adfD/
6df17149302a2cb98a128880ea6df6fe1092d0cd169dda5bd470cf1dc5c73494D.
f23ad28777ef3020a0b4c72141bc0d367c9a60a8eca144eafcef471df349d126D-
0f6bed5732bc76bfe3e0c85d59ade8d7716ebb9113974ea0d93511212d1907dfD,
f9112352a12b79f2772b0d357f993f93cfbadb96eb79b1c1b7ea2072dad1e32aD+
80e8a702983be224224c674404dfed4b8a89aa2c699a0bb3c32dc8c20f0219c9D*
6cb04e523ff2e6b8d60ef0c4e8df263d8d56af10fd076b4510daa749d0d1b65dD)
28f3f06dbb75d2a2fd58b0494a47a36def1dde4acad9dde4faf9ec2d6f7c9321D(
fbdf0d211089d0219b49949e4bac45457c7c0de563ac494e01584ec1c65eb69d
x d x s(Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)
}!(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p }g(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220) }9(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?
}(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178) {7(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
r&B {7)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{c)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{k)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeHs (Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
s#(Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)
=,
s#)Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)s)Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)}!)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p}g)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?})Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)
9> { w*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r wq*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589) w*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)xw}*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)Hs )Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
Pa t$wu*Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z#{{*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g"{W*Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
!{!*Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[ wC*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase, wc*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
m \ m
+{!+Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[*wC+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,)wc+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){(w+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r'wq+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)&w+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)x%w}+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)
!& {1w,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r0wq,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)/w,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)t.wu+Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z-{{+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g,{W+Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Pa d8wU,Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t7wu,Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z6{{,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g5{W,Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
4{!,Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[3wC,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,2wc,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
~ zy ~ g?{W-Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
>{!-Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[=wC-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,<wc-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){;w-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r:wq-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)9w-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)
# $1 # [FwC.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,Ewc.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){Dw.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rCwq.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)dBwU-Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tAwu-Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z@{{-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
, o) , rMwq/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)L{.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dKwU.Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tJwu.Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zI{{.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gH{W.Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
G{!.Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)
{ ty { zS{{/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gR{W/Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Q{!/Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[PwC/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,Owc/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){Nw/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)
} " l }
Z{!0Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[YwC0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,Xwc0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){Ww0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)V{/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dUwU/Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tTwu/Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)
, !2 , {aw1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)`{0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)_{0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d^wU0Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t]wu0Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z\{{0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g[{W0Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Pa dhwU1Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tgwu1Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zf{{1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)ge{W1Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
d{!1Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[cwC1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,bwc1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
" x " towu2Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zn{{2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gm{W2Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
l{!2Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[kwC2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebasej{1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)i{1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
* % * gw{W3Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
v{!3Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[uwC3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebaseqt{k2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakes{#2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)r{2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)q{2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dpwU2Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)
$ }{#3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)|{3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){{3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dzwU3Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tywu3Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zx{{3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
- - {4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwU4Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twu4Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g {W4Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!4Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)q~{k3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrq g
{W5Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!5Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)m{c4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{k4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{#4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
e r+V: e DA
911c67bf8be2e9d6a8d64cffde6ace72707962e5ee3df52066dc91049cea2aa1D@
d3c2e1e27a400829f10a9833f70edf0886d63ded954c2aca900c1d63fd6cb984D?
0304822e8138a928f86fc2b725ede94f0fe7ad348c85d005729fc71bac0ba3b2D>
4dc25e03c0a0a30babb3b4e2d1e9e2f11733686d656dc393fa7d1a62fc9f6fc3D=
05e34813e9daef9255f5e02eb2c3753c5308d070ffe9608abf8367fedeff8e2dD<
1aa586cd752451a887e64054c0eda881403fbc6b7e9c6079ce1e356a839fd225D;
defc20ca4fb42304e9222b189cd76864191e45eb95df7eb3cb3ba3efd335419fD:
f292ac03827b0d517e0873201d36bd5f7899da820fe99fba7955de328d3e2773D9
6335456bae4a6531a1e5a588c09b5fa47d70ef61f6374951aca147a452b4eb02D8
b3204ebd71ad924147ec931e26a4e2b1126596abc3c240218c3fa6304427d289D7
33233f04e60e9c664a7bf40da5737db125bcf521206e43d06261d80d1b4babe3D6
ebf8758838f5dc246c98cc6f76706eafa07a5083df17f4fbfa2489df5db98458D5
9840fc5d69627a908ae29e24dc640f83ad9be6b88a9779079293c46cd56d1fa5
$ {#5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d
wU5Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t wu5Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z {{5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
N = N {6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwU6Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twu6Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{W6Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken serversm{c5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{k5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrf g {W7Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers {76Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{c6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{k6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{#6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
$ #{#7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)"{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)!{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d wU7Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t wu7Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z {{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
*{8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d)wU8Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t(wu8Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z'{{8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)&{77Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m%{c7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q${k7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrf ?0}8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)/{78Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m.{c8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q-{k8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake,{#8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)+{8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
$ 6{#9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)5{9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)4{9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d3wU9Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t2wu9Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z1{{9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
5 ={#:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)<{:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215);{:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)?:}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)9{79Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m8{c9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q7{k9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
D}!:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pC}g:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)B}9:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?A}:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)@{7:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m?{c:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q>{k:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
x^z ?K};Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)J{7;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mI{c;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qH{k;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeG{#;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)F{;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)E{;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
_ b]C _ mR{c<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qQ{k<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeP{#<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)O{<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)N}!;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pM}g;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)L}9;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
y d y Xq<Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)W}!<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pV}g<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)U}9<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?T}<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)S{7<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
xrf ?^}=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)]{7=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m\{c=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q[{k=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeZ{#=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)Y{=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
b b]F b me{c>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qd{k>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakec{#>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)bq=Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)a}!=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p`}g=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)_}9=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
x d x ks>Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)j}!>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pi}g>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)h}9>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?g}>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)f{7>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
rl` ?q}?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)p{7?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mo{c?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qn{k?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakem{#?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
ls#>Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)
e b]I e mx{c@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qw{k@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
vs#?Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)us?Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)t}!?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)ps}g?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)r}9?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
x d x ~s@Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)}}!@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p|}g@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220){}9@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?z}@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)y{7@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
r&B {7APetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{cAPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{kAPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeH s @Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
s#@Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)
=,
s#AStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)sAStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)}!APetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p}gAPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9APetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?}APetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178) of flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| gh hn iu j{ k l n o p q r$ s+ t1 u8 v? wF xM yS zZ {a |h }o ~w }
# * 0 6 = D K R X ^ e k q x ~ ! ( / 6 = C J Q X _ g m t z
& - 4 ; B H N U [ a h n s y ~ ě ś ƛ& Ǜ- ț3 ɛ: ʛA ˛H ̛O ͛W Λ] ϛd Лj ћp қw ӛ} Ԝ ՜
֜ ٜ ڜ$ ۜ+ ܜ2
9> {wBPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r
wqBPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589) wBPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)x w}BPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)H
s AStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
e r+V: e DN
dca184c57d0913cdde1f9f39c446f2cad1f8daa197d290e0f0ee296dc3b345daDM
3c96054de3771395180ce2ef6da4dfcd565ee2d14573da0adad58ff76b63d77aDL
31deb0ef8475cdf1766d7273df81d1e80842c260ddc7eac34364361b4b00b974DK
2c72fd0a8014e13440ebde0c0ae037cea29cc8aa567b3723619486dc2040f9e5DJ
fc93fa73ee589349b26030b1fd56173975859786d624ddeaf826606e99c8b4f3DI
0f79393bd746c2a784972b1db928fdca74d0c0324e00a1859ceede81d1af8b93DH
8e85466eac6dba299f3f8211333d50827e103a67a8296884c3d1d1a87ce8a828DG
43570d8e293bd93001cb8c4cac3e4b2045b3024b7f3e08f4449735bfb9d206c6DF
c779ed4a8b7cd8df613f47c214050d61ac25927ab97381ffb59944fb998585ffDE
c9392783583e0597ccdfaf17dae6fee1b00c3d8da0cb91842328276045fb62a5DD
7b3d8994d78928ac66011137e013e2d788ecc7712d592ce7c08306cfd1728489DC
90290c5f2092315060a14a82b7d692c91c1f7a1b307ffd574420dbe3936b6177DB
df8d2506c03d24e1a590d6879a32d25fc08c64674c5b3363908407344377e1dd
Pa twuBTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{BPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{WBArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!BArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wCBPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,wcBPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
m \ m
{!CArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wCCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,wcCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rwqCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)xw}CPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)
!& {!wDPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r wqDPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589) wDPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)t wuCTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z {{CPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g {WCArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Pa d(wUDTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t'wuDTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z&{{DPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g%{WDArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
${!DArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[#wCDPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,"wcDPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
~ zy ~ g/{WEArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
.{!EArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[-wCEPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,,wcEPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){+wEPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r*wqEPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589))wEPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)
# $1 # [6wCFPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,5wcFPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){4wFPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r3wqFPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d2wUETomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t1wuETomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z0{{EPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
, o) , r=wqGPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)<{FPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d;wUFTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t:wuFTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z9{{FPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g8{WFArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
7{!FArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)
{ ty { zC{{GPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gB{WGArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
A{!GArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[@wCGPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,?wcGPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){>wGPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)
} " l }
J{!HArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[IwCHPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,HwcHPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){GwHPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)F{GPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dEwUGTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tDwuGTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)
, !2 , {QwIPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)P{HPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)O{HPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dNwUHTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tMwuHTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zL{{HPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gK{WHArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Pa dXwUITomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tWwuITomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zV{{IPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gU{WIArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
T{!IArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[SwCIPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,RwcIPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
" x " t_wuJTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z^{{JPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g]{WJArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
\{!JArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[[wCJPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebaseZ{IPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)Y{IPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
* % * gg{WKArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
f{!KArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[ewCKPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebaseqd{kJPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakec{#JPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)b{JPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)a{JPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d`wUJTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)
$ m{#KPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)l{KPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)k{KPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)djwUKTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tiwuKTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zh{{KPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
- - t{LPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dswULTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)trwuLTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zq{{LPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gp{WLArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
o{!LArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)qn{kKPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrq gz{WMArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
y{!MArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)mx{cLPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qw{kLPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakev{#LPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)u{LPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
$ {#MPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){MPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)~{MPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d}wUMTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t|wuMTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{{MPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
N = N {NPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwUNTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twuNTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{NPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{WNArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken serversm{cMPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{kMPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrf g
{WOArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers {7NPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m {cNPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q
{kNPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake {#NPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){NPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
e r+V: e D[
6164453fc73f06d895ca8df581d46682883daa8322bdf6c511c25bd367caea15DZ
808073e5962f5fd81e0f89ce66bccad77dea549a509cf522580257f973f2dbe4DY
f5d02c79227db8a83ef923f005bb223131cc21a7d230cd462aa73916b2da8a5aDX
0ce460c4fec36484894f526d04090272961a86fa1cadfc07b79bf7eb7f0095f6DW
e72e7e5054cec7dd0b5f52acc7183ddfcb107875c50ad6ef52f07a3785689966DV
1c21a4bf7dd0a9330e1d0f9859575f2ab5436413cea65a4a73f0b1991f3dd1ceDU
72ab9b204a4a984bb758843741ab139089f24553cac0336f08a7b1d1029030aeDT
9339fa8d6974fa8dfc8e28dbe75760c7c49d355183c0f71b2e5d7d7ea2db67dcDS
f48ce4d917bdd2d6d5ec5a6aa18216b99e980b86d7308d6e535eafb38aa0fbfcDR
f13d76a0cbcea5bf7f05f28bbb2ad0ca59d71e977f1c3f3c544f403d4f947794DQ
a1b74be1d5a4cc7822e76a9f4d891bbacc535194cb8b1f766c6b04f42b2e443aDP
e7ad03734c0fc0d4d420d177cc82478f12f8c7fcb1b49294d3f686e186915e9bDO
3d75be4567f3055d6aa45834620c4fdab40240d0eac958aa3b5401832cf284bb
$ {#OPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){OPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){OPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwUOTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twuOTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{OPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
{PPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwUPTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twuPTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{PPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624){7OPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{cOPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{kOPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrf ? }PPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178) {7PPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m {cPPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q {kPPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake {#PPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){PPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
$ &{#QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)%{QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)${QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d#wUQTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t"wuQTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z!{{QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
5 -{#RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214),{RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)+{RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)?*}QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)){7QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m({cQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q'{kQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
4}!RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p3}gRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)2}9RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?1}RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)0{7RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m/{cRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q.{kRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
x^z ?;}SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178):{7SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m9{cSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q8{kSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake7{#SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)6{SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)5{SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
_ b]C _ mB{cTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qA{kTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake@{#TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)?{TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)>}!SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p=}gSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)<}9SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
y d y HqTStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)G}!TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pF}gTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)E}9TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?D}TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)C{7TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
xrf ?N}UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)M{7UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mL{cUPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qK{kUPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeJ{#UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)I{UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
b b]F b mU{cVPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qT{kVPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeS{#VPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)RqUStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)Q}!UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pP}gUPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)O}9UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
x d x [sVStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)Z}!VPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pY}gVPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)X}9VPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?W}VPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)V{7VPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
rl` ?a}WPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)`{7WPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m_{cWPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q^{kWPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake]{#WPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
\s#VStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)
e b]I e mh{cXPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qg{kXPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
fs#WStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)esWStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)d}!WPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pc}gWPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)b}9WPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
x d x nsXStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)m}!XPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pl}gXPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)k}9XPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?j}XPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)i{7XPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
r&B s{7YPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mr{cYPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qq{kYPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeHps XStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
os#XStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)
=,
ys#YStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)xsYStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)w}!YPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pv}gYPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)u}9YPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?t}YPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)
9> {~wZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r}wqZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)|wZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)x{w}ZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)Hzs YStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
Pa twuZTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{ZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{WZArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!ZArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[ wCZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,wcZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
m \ m
{![Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[
wC[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase, wc[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){w[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rwq[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)w[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)xw}[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)
!& {w\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rwq\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)w\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)twu[Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z
{{[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g {W[Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
e r+V: e Dh
c5debfa2df24c434430b601b89c524d821308d5207f350610e556a17360391b5Dg
46f776adf7f88106a8e818889463dd616d261bb3462ec68346857a126aee742eDf
5105577688287233ec925ee639d92524c00f6f7490e2c5501c49eeb0f07cd511De
802a7e88deb752607d0e6f0f44f099a1dfee4747bd86101389d25eccf2a9ebe8Dd
7d49e6164c17d7539dfdc7b2354026cb06b6ee0a32b0c9218ac3d8960f348534Dc
f9e741d7af4fbcb102cf759697c858701bf8839ced08a5f62c9415ac5de9dda3Db
23886775cbbf0f0b980d7e700a1fa3cce9ae8149522a191554e770fe0acf1813Da
0d291da8585bc5dc3d72a81e494c64767eb04ba5a938f0847121edded2bcbdecD`
2974a1f35f8a1dbd3f46361c76fee7876402f098199e8208407a59471c892340D_
5380ad090ba99c100379b2fc1cf54a62f85cdfe390b04b6e5e0fe4c213aa4661D^
43a8791d748c2ca3cb5e8c1b6682319313b8373bb0e84e9e545ba09dc9e093bbD]
012bfa8eacdc2cdef0742df38d48737a13ab8171afc5020ef127dc81084a68b5D\
ffa04ef798ab2e5815f659306b1ff16a316bf5e5501788e7e0bdda2800e8afd0
Pa dwU\Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twu\Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{W\Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!\Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wC\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,wc\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
~ zy ~ g {W]Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!]Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[ wC]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase, wc]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){w]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rwq]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)w]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)
# $1 # [&wC^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,%wc^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){$w^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r#wq^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d"wU]Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t!wu]Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z {{]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
, o) , r-wq_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589),{^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d+wU^Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t*wu^Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z){{^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g({W^Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
'{!^Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)
{ ty { z3{{_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g2{W_Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
1{!_Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[0wC_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,/wc_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){.w_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)
} " l }
:{!`Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[9wC`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,8wc`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){7w`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)6{_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d5wU_Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t4wu_Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)
, !2 , {AwaPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)@{`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)?{`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d>wU`Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t=wu`Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z<{{`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g;{W`Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Pa dHwUaTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tGwuaTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zF{{aPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gE{WaArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
D{!aArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[CwCaPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,BwcaPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
" x " tOwubTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zN{{bPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gM{WbArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
L{!bArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[KwCbPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebaseJ{aPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)I{aPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
* % * gW{WcArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
V{!cArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[UwCcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebaseqT{kbPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeS{#bPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)R{bPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)Q{bPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dPwUbTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)
$ ]{#cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)\{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)[{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dZwUcTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tYwucTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zX{{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
- - d{dPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dcwUdTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tbwudTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)za{{dPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g`{WdArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
_{!dArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)q^{kcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrq gj{WeArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
i{!eArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)mh{cdPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qg{kdPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakef{#dPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)e{dPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
$ p{#ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)o{ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)n{ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dmwUeTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tlwueTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zk{{ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
N = N w{fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dvwUfTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tuwufTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zt{{fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gs{WfArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken serversmr{cePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qq{kePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrf g}{WgArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers|{7fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{{cfPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qz{kfPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakey{#fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)x{fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
$ {#gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d wUgTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twugTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z~{{gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
{hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d wUhTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twuhTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624){7gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{cgPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{kgPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrf {iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)?}hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178){7hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{chPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q
{khPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake {#hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) {hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
e r+V: e Du
7266766000b531cf157295f474f17dcfde3f6c02dca1c64d75e027774c33560fDt
5b90034629bafae7fc40e3688bcd096834f9ce5de48a7f47ccb507c4f1c06c93Ds
ef23d81c590cbf657f32525eaf60a72a65cac4272b7cfa37677546ee5204deb1Dr
44e365718f57aa02dbc0e6c0f884b3e6dd15e03acd28ab5154d917184b1d05ceDq
417df6c01f4373a219da10ea1df04e2565b5b27e4710818aa6718065c174f25fDp
fad06e13ad887025495d47068294bf443e6c6209bbb16324fa1b3eb9ef5a885eDo
4cfa5141393a1004bc9d7885fee9a606293ee21216066238700f933afd5e4598Dn
9339296f633515808554bf8032f56569d2f34d4c9a34b1d71f968cd560dfc9e2Dm
64d39cb55589918f3c7cc7eebfd7ff6020fe1f126e87eb124bd3399e6a321938Dl
d39ddef78717bb9c60b1a73d0b5bd7070471daf3610288379a07921135392492Dk
ed2d48ef1a3e3a6e64fd20780277157eee5875df3e41cf640f9569e3437be284Dj
8f9c62b62ee309f73ecbf3c62a51cb3d3b553a7505e51047083926355d41e0cdDi
898a882b2bfc15fc532825fa940804005432ab222c1efaacec472c1c18aa8c66
xrf ?}iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178){7iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{ciPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{kiPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{#iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
_ b]C _ m {cjPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q {kjPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake {#jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)}!iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p}giPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
y d y $qjStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)#}!jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p"}gjPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)!}9jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)? }jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178) {7jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
n+ p+}gkPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)*}9kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?)}kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)({7kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m'{ckPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q&{kkPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake%{#kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
nZv ?2}lPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)1{7lPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m0{clPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q/{klPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
.s#kStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)-skStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828),}!kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)
I b]I
7s#lStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)6slStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)5}!lPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p4}glPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)3}9lPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
9> {<wmPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r;wqmPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589):wmPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)x9w}mPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)H8s lStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
Pa tBwumTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zA{{mPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g@{WmArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
?{!mArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[>wCmPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,=wcmPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
~ zy ~ gI{WnArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
H{!nArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[GwCnPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,FwcnPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){EwnPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rDwqnPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)CwnPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)
# $1 # [PwCoPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,OwcoPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){NwoPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rMwqoPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)dLwUnTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tKwunTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zJ{{nPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
# o) # {WwpPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)V{oPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dUwUoTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tTwuoTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zS{{oPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gR{WoArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Q{!oArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)
Pa d^wUpTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t]wupTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z\{{pPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g[{WpArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Z{!pArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[YwCpPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,XwcpPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
" x " tewuqTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zd{{qPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gc{WqArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
b{!qArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[awCqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase`{pPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)_{pPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
gl{WrArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
k{!rArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)qj{kqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakei{#qPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)h{qPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)g{qPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dfwUqTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)
$ r{#rPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)q{rPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)p{rPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dowUrTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tnwurTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zm{{rPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
N = N y{sPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dxwUsTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twwusTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zv{{sPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gu{WsArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken serversmt{crPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qs{krPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
h xrf h z{{tPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)~{7sPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m}{csPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q|{ksPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{{#sPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)z{sPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
" m{ctPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{ktPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{#tPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){tPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){tPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwUtTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t wutTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)
= d, = {uPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d wUuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t
wuuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z {{uPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)?}tPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178){7tPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
xrf {vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)?}uPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178){7uPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{cuPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{kuPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{#uPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
{uPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
e r+V: e D
d97cd106cf9572dc73237ecabf174c9e7fd63f1831ecd180582edfe2ee993409D
29afed10faa9e050e9b84ade3202f51f3836b8d12289ddbf91099a716ea0838cD
8b2f892532b5441db04bb9a1d3ad5ae901202de8ca4725355c38b6ac842c3f60D
1a86cce369d4fa519dc82e79409e0ff8f027575c7dd5f588f2c3ca8ed78e840bD~
ec694ed3c68742fc4ff18e183f1eb03790bcac0cf47880b2b25ad5ac15c207f6D}
b1c8c2c11e1df4cb77d96713a2285d4a6059f60b0d4baf4e2122da1910d62f6fD|
6277ccdddce2fa5ee1ecc12615c107ef3a280e1716b89c5bb60d515fecf84416D{
f985f476bdedc2f9a31dcd4fddfea63520d50b7d0201272e1df3ec06366409a3Dz
cbc4ea12d67dbb0aec7f99363fd0094c3b67059cbe632d6140c54b02128a4520Dy
014f5bd144904dc6d27a7fe4b1819401d5f70ea084c8f04cf734fc30dd3fcfacDx
68dca12ceecda33b2f945d88f466ab32954ff89b462395ef6346d95a47ea375eDw
3f67c1b26c1f278f9f7675269681e617b83498e50e541a04d9a936a563d20506Dv
4ff754e3b0277c5062fbf7116cde18b1ff4c39ef530dd4fecc189d221739fe28
xrf ?}vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178){7vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{cvPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{kvPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{#vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
G b]M G q {kwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake {#wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) {wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215) {wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) }!vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p}gvPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
1 &}!wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p%}gwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)$}9wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?#}wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)"{7wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m!{cwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)
xrf ?,}xPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)+{7xPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m*{cxPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q){kxPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake({#xPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)'{xPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
J b]P J q3{kyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake2{#yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)1{yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)0qxStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)/}!xPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p.}gxPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)-}9xPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
1 9}!yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p8}gyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)7}9yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?6}yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)5{7yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m4{cyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)
{ui ??}zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)>{7zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m={czPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q<{kzPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake;{#zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214):qyStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)
C b]I C qF{k{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeE{#{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
Ds#zStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)CszStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)B}!zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pA}gzPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)@}9zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
1 L}!{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pK}g{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)J}9{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?I}{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)H{7{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mG{c{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)
zxl ?R}|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)Q{7|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mP{c|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qO{k|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
Ns#{Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)Ms{Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)
I b]I
Ws#|Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)Vs|Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)U}!|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pT}g|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)S}9|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
q @4 q ?\}}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)[{7}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mZ{c}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qY{k}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeHXs |Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
I b]I
as#}Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)`s}Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)_}!}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p^}g}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)]}9}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
9> {fw~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rewq~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)dw~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)xcw}~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)Hbs }Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
Pa tlwu~Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zk{{~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gj{W~Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
i{!~Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[hwC~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,gwc~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
m \ m
s{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[rwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,qwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){pwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rowqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)nwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)xmw}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)
!& {ywPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rxwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)wwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)tvwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zu{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gt{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Pa d wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z~{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g}{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
|{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[{wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,zwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
~ zy ~ g{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)
# $1 # [wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,
wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){ wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d
wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
, o) , rwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)
e r+V: e D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{ ty { z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)
} " l }
"{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[!wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase, wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){ wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201) {Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)
, !2 , {)wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)({Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)'{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d&wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t%wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z${{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g#{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Pa d0wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t/wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z.{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g-{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
,{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[+wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,*wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
" x " t7wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z6{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g5{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
4{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[3wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase2{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)1{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
* % * g?{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
>{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[=wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebaseq<{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake;{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214):{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)9{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d8wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)
$ E{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)D{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)C{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dBwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tAwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z@{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
- - L{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dKwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tJwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zI{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gH{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
G{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)qF{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrq gR{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Q{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)mP{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qO{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeN{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)M{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
$ X{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)W{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)V{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dUwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tTwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zS{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
N = N _{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d^wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t]wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z\{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g[{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken serversmZ{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qY{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake of Sflrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| ޜ< ߜB I P W ^ e l r y & , 3 9 ? F L R W \ a f l s y " ) 0 7 ? E
L R X
_ e k r y $ * 1 8 ? F M !T "Z #a $g %n &t '{ ( ) * + , .! /' 0. 14 2: 3? 4D 5I 6N 7T 8[ 9a :h ;o <v =} > ?
@ A B D' E- F4 G: H@ IG JM KS LZ M` Nf Om Pt Q{ R
xrf ge{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken serversd{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mc{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qb{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakea{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)`{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
$ k{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)j{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)i{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dhwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tgwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zf{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
r{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dqwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tpwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zo{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)n{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mm{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)ql{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrf y{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)?x}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)w{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mv{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qu{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistaket{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)s{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
xrf ?}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)~{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m}{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q|{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)z{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
_ b]C _ m{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220) }9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
y d y qStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828) }!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p
}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220) }9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178){7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
n+ p}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178){7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
nZv ?}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178){7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
s#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)sStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)
e r+V: e D
5cbb74a2688de09192fd42f0956329cbe2c77efa2ec5ed4d5dd90ffcdd07f898D
5fe18b0b420aaf810ed5edcf1e1fd4fa93b6639632315bdd9348ecd11d6dac60D
4f490fc935e1622edd8f29833cff99546eda921facd62b71d30c95acefada869D
e9c57b29838349dee4d11ec1d130cd0d7b3fb5df669721f178440fd42a507752D
5272f52e8e18d2702e48f4c1ff860fc6d052acf1543d9556f54efa55bbe31535D
913377ddeda7e9a87688016fb775cfe7ac678ed7b17cab277996497a766e6c67D
bd2c5200554793773e752c3edacd8567d9f6db98bf2bc3399bb18086f6b771e8D
4d2dbd65fa67b8c23648a188f830340cc1da72b5dbc71795229022de0ff9720dD
b524427963041d0c49036598caa6da026b76085863c14fdbec1466146a3b137aD
8df89d78d785928efa5b8d059e96ce33ffe0c9356663c9acb50ce3ec8c660d92D
0a8d2dafb528818f6b019015fbaf8cdd2fe3b6535d85da90f6a1db984b828e8eD
9e6c9b4224affd5105ee5ffe4355eb2e09681fde2148ce946769e1c4583a360bD
bd0b8c4bd642bf2ddec4f60168cf63044086bf8e861160721a1ffb61a553229a
I b]I
s#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341) sStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828) }!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p }gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
9> {$wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r#wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)"wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)x!w}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)H s Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
Pa t*wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z){{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g({WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
'{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[&wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,%wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
~ zy ~ g1{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
0{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[/wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,.wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){-wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r,wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)+wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)
# $1 # [8wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,7wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){6wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r5wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d4wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t3wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z2{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
# o) # {?wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)>{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d=wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t<wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z;{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g:{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
9{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)
Pa dFwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tEwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zD{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gC{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
B{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[AwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,@wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
" x " tMwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zL{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gK{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
J{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[IwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebaseH{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)G{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
gT{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
S{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)qR{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeQ{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)P{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)O{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dNwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)
$ Z{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)Y{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)X{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dWwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tVwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zU{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
N = N a{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d`wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t_wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z^{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g]{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken serversm\{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q[{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
h xrf h zg{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)f{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)me{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qd{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakec{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)b{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
" mn{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qm{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakel{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)k{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)j{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)diwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)thwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)
= d, = t{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dswUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)trwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zq{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)?p}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)o{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
xrf {{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)?z}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)y{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mx{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qw{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakev{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)u{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
xrf ?}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178) {7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q~{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake}{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)|{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
G b]M G q{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
1 }!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p
}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220) }9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)? }Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)
{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m {cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)
xrf ?}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178){7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
J b]P J q{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)qStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
e r+V: e D)
afda0e4a1bc46470df4a4993f659a23e39c688752ccd5958b18e448a2d51f8d1D(
2eb85e9cbd29bebc8ce3cd107af06c6ae0f59fcc9a1056aa9226b8201c309a26D'
1612a4f04271f95f905580cfc4cc94695b1a11ade17803d000750d518bc0e3acD&
f5a544c1c54d159d63ecf02b66555411db8230d7164937c969ee12412a7b3426D%
3f11637118683c18d64ab08e86467d90916b689368a1c29e9b095c9b7c8e2633D$
26e0a18b1adcde25239343e4537dc1023fada0ed64e1d72e8b7a98ac795d90deD#
1b0d419b8d0ecbbebdaf88198d39462c8f0babefb9b711f46865cfaaf19e8ad2D"
ffc1d3cbc957771182427d3972e83824283b43b4272f105619d32ec0195171ceD!
b1efb67b99edebdc9042e5a1fc8376aaaf9c18620d6efda4ea95ea1b1ebc91c5D
3059b560a681189650e415ad7288004812bfd2e3c70a86249b7a9650f86f646eD
e9972fdb7ca4cc3ff44e4f3ed37bfc724bfa5d7006592b775660808adeaacd37D
02e583fec180896fabf3422f69975545e3bd8d8460665b7044a186d0d5a4f817D
c9ec93a5f3a15917b5ceeb7e19b67519e6e4ed8b7b2df39dc7999cf6d9f4c5e5
1 !}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p }gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220) }9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)? }Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178) {7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m {cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)
{ui ?'}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)&{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m%{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q${kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake#{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)"qStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)
C b]I C q.{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake-{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
,s#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)+sStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)*}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p)}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)(}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
1 4}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p3}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)2}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?1}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)0{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m/{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)
zxl ?:}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)9{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m8{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q7{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
6s#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)5sStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)
I b]I
?s#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)>sStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)=}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p<}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220);}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
q @4 q ?D}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)C{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mB{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qA{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeH@s Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
I b]I
Is#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)HsStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)G}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pF}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)E}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
9> {NwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rMwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)LwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)xKw}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)HJs Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
Pa tTwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zS{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gR{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Q{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[PwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,OwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
m \ m
[{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[ZwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,YwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){XwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rWwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)VwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)xUw}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)
!& {awPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r`wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)_wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)t^wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z]{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g\{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Pa dhwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tgwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zf{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)ge{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
d{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[cwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,bwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
~ zy ~ go{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
n{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[mwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,lwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){kwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rjwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)iwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)
# $1 # [vwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,uwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){twPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rswqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)drwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tqwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zp{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
, o) , r}wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)|{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d{wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tzwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zy{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gx{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
w{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)
{ ty { z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[ wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){~wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)
} " l }
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[ wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)
, !2 , {wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t
wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z {{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g {WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Pa dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
" x " t wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z {{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g {WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
e r+V: e D6
05ba725d5c869c501d11a5e7d8127d0ad80d328b3e6147d560401baf1810497bD5
516201be4c2a553028eb1f983417912a1b05f800b8989fcd30a55f89623a57b6D4
1f800a61ea4b98c012916d84ad280573560d18bf31af0e459b43494dbf907a0dD3
edfa799d5c426dea0808d52912a4ed39b1534c8e7a5d3dc0a96937be66990f1cD2
9ed16457c6de56bbd64bcca2285bd78861c098822395446cc3a1c693ffb69c77D1
bc1b8404e2707eba59addc78201595f614f7350f97cf87e924e6f6dbac90b3c3D0
2953e2a9ba9042a9c5ebb93523d595d91f7367d8b83dc5b40a473e85572478b2D/
0f0f20e5079748f9103ff3e0068108043ec9079822de5e46263c2c1f09b6dc0dD.
c0a3bcd41e5beba5e539861177a8ed67f9626d4b21b11ab1b621770a53bf3137D-
43e8db14504b7b1b92c33224717880dd9e4ea6101787efd5f0da89bc9bf2d7a0D,
ebbfadfcdd945e3b5ae40adb51fb4d444facc09bdd9f9cc989542bfed2cdee60D+
5ca5234e59243cc5ced75e11bc9ad434a82d86c5fa5eab71a130bd3c3ae49334D*
d4718c0bcf9365bfcd07e9c307952a12ae32802cbc6bde5707222c30c90cbb85
* % * g'{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
&{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[%wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebaseq${kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake#{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)"{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)!{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)
$ -{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214),{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)+{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d*wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t)wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z({{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
- - 4{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d3wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t2wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z1{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g0{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
/{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)q.{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrq g:{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
9{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)m8{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q7{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake6{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)5{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
$ @{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)?{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)>{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d=wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t<wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z;{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
N = N G{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dFwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tEwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zD{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gC{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken serversmB{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qA{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrf gM{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken serversL{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mK{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qJ{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeI{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)H{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
$ S{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)R{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)Q{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dPwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tOwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zN{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
Z{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dYwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tXwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zW{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)V{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mU{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qT{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrf ?`}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)_{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m^{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q]{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake\{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)[{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
$ f{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)e{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)d{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dcwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tbwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)za{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
5 m{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)l{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)k{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)?j}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)i{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mh{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qg{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
t}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)ps}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)r}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?q}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)p{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mo{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qn{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
x^z ?{}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)z{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)my{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qx{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakew{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)v{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)u{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
_ b]C _ m{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake {#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)~}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p}}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)|}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
y d y qStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178){7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
xrf ?}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)
{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m {cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q {kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) {Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
b b]F b m{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)qStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
x d x sStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178){7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
rl` ?!}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178) {7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m {cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q {kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake {#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
s#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)
e r+V: e DC
32f0185e8d6a9ab586922827519f1f38fb921fcaff260385904d3e61dd029d44DB
3d4d0d965fc073d950dd63507c1b1287648ef59c103d02cf09891c04bd99e930DA
d0428b24d84b75519bce64c115f13b151f065712ac094dcd035dc9b63bbdc664D@
0d953611a4ac63b86ca9bbf1ca0f35e9ef53094123f9e581e16919ed0393c690D?
40ceb41cf108321fdafc40bff1168cbc4f3e85a9ec271d6b55e946ed83697fb7D>
86d0b148abfa317696a046ac187cb479b242ea3f9ec769e6891130395ea172a9D=
b3e23051f12c034b848268c08321e17a519c484640546a3ae90e7f99b36e7174D<
9ea26fb857c06b7e275a794a125b7880359b3911861019696cd35074ee1063d3D;
ba3bba99a83841a7ef214b159627a5734756196a37510565d94c55e374ab6dc9D:
6c557f44383a709d2f0b400c2b77b432a965e5b7d4507ed1ecaf15fd92b55760D9
932e0ad4e24e0525ba464544c1e8e10938e5fe172b6f926e51a12e6e2874b3edD8
98cb7a80b5609722e12d6cd1a4562d0177f0672359013887fde3560ec9647c8fD7
83e71037aa03cb56d8e5d9d0d2f0e410673cb723d0cf4f81dff15ea65830fd59
e b]I e m({cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q'{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
&s#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)%sStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)$}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p#}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)"}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
x d x .sStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)-}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p,}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)+}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?*}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)){7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
r&B 3{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m2{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q1{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeH0s Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
/s#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)
=,
9s#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)8sStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)7}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p6}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)5}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?4}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)
9> {>wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r=wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)<wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)x;w}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)H:s Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
Pa tDwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zC{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gB{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
A{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[@wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,?wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
m \ m
K{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[JwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,IwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){HwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rGwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)FwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)xEw}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)
!& {QwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rPwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)OwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)tNwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zM{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gL{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Pa dXwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tWwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zV{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gU{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
T{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[SwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,RwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
~ zy ~ g_{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
^{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[]wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,\wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){[wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rZwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)YwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)
# $1 # [fwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,ewcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){dwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rcwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)dbwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tawuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z`{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
, o) , rmwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)l{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dkwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tjwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zi{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gh{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
g{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)
{ ty { zs{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gr{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
q{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[pwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,owcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){nwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)
} " l }
z{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[ywCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,xwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){wwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)v{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)duwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)ttwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)
, !2 , {wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201) {Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d~wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t}wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z|{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
Pa dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
" x " twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g
{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[ wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase
{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215) {Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
* % * g{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebaseq{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)
$ {#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) {Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
- - ${Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d#wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t"wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z!{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g {WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)q {kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
e r+V: e DP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 g*{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
){!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)m({cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q'{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake&{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)%{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
$ 0{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)/{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215).{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d-wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t,wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z+{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
N = N 7{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d6wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t5wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z4{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g3{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken serversm2{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q1{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrf g={WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers<{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m;{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q:{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake9{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)8{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
$ C{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)B{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)A{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d@wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t?wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z>{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
J{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dIwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tHwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zG{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)F{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mE{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qD{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrf Q{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)?P}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)O{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mN{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qM{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeL{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)K{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
xrf ?W}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)V{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mU{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qT{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeS{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)R{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
_ b]C _ m^{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q]{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake\{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)[{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)Z}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pY}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)X}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
y d y dqStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)c}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pb}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)a}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?`}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)_{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
n+ pk}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)j}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?i}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)h{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mg{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qf{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakee{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
nZv ?r}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)q{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mp{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qo{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
ns#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)msStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)l}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)
I b]I
ws#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)vsStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)u}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pt}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)s}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
9> {|wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r{wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)zwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)xyw}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)Hxs Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
Pa twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g {WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[~wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,}wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
~ zy ~ g {WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)
# $1 # [wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r
wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z
{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
# o) # {wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)
Pa d wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z {{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
" x " t%wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z${{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g#{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
"{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[!wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase {Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215) {Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
e r+V: e D]
ca5ee1ff2a858d3eaf6bbed3a7c0421519183d99018689b9d2bfb4f8b2bdb122D\
02b9f36207f55eecbaed6219e76bf38881875be99f49e0eca71ec75e6d3a7aa3D[
235100bdba26a1af51c7f66f533d9318837d01dafa0c5e822245c8e0e5469978DZ
1efc77004111254487934c32f189a3b3fc8b1baf00a6e8350558183281f3855dDY
f6274f5c3cd73beb54d94229fd5b93b99b525f50921dae06b852ca0ada18b5b9DX
955704fe8de0bbcec645e44f2b204e4b12ce8b7bd2c8bfaba5e8968ee76f0568DW
74f4bb31b79790aa5a646612520c06cdd181b6e3e39b90a65dfc2634c1821260DV
cf810cc7447c597839d02d5738646b8afcdb25edddcbd9cfbd3173d5a01cf3a3DU
089b94f213c170e875e90bb476e333d4b7d2491e323f4692f8e1513f78b4203eDT
8724fc26052010a537fbffaecee3413ede14b44646e26a456c4c8695f5f259c0DS
11e7a9eb9ad854ce3901deb76ff9ab3e462f87d56766b9cda133c1fbcc89d812DR
1a7fc39e7d481badbe2fe10dd40d290dcdefdeb4f572a8affee7880a751d5805DQ
f7789c32ac34827df4b6c180e845361bb70aa1fcbc165a6c2a533559f2bc3f76
g,{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
+{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)q*{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake){#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)({Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)'{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d&wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)
$ 2{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)1{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)0{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d/wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t.wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z-{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624) of flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| T U V W! Y( Z. [3 \9 ]> ^D _K `Q aX b_ cf dm es fz g h i j k l$ n* o0 p7 q= rC sJ tQ uW v^ wd xk yr zw {| | } ~ % , 2 9 ? F M S Z ` f m s y ! ( / 6 < C J P W ] d i p v }
% + 2 9 ? F L S Z _ d j q x
! ( §. ç4 ħ: ŧA ƧH ǧO ȧV ɧZ
N = N 9{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d8wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t7wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z6{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g5{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken serversm4{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q3{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
h xrf h z?{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)>{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m={cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q<{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake;{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214):{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
" mF{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qE{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeD{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)C{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)B{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dAwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t@wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)
d mM{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qL{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeK{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)J{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)I{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)?H}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)G{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
v d v S{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)R}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pQ}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)P}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?O}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)N{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
n+ pZ}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)Y}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?X}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)W{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mV{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qU{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeT{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
nWs `{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m_{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q^{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake]{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)\qStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)[}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)
=,
fs#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)esStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)d}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pc}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)b}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?a}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)
m}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pl}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)k}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?j}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)i{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mh{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qg{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
* z% * rswqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)rwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)xqw}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)Hps Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
os#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)nsStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)
{ ty { zy{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gx{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
w{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[vwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,uwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){twPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)
q ` q
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,~wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){}wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)r|wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589){wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)tzwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)
!E ,wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
C 2 C {Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d
wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z {{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g
{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase
{ ty { z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)
"# g{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)
$ !{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) {Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215) {Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z {{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
- - ({Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d'wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t&wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z%{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g${WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
#{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)q"{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
e r+V: e Dj
32af5400af5619a7e1f0c43f574170ae98cfd7cdc7e831f572b8d05530bd8913Di
850be6d438290af4b3c31805a40c2f8a88e4e751bafa1bb02b6b884736f80ef2Dh
8317594c4733bc6fd9c13e0001d962d14e7bffb83ed66e6337f6b8a490067ea9Dg
a191bcc40fb33d21a6109e116756d8999e60adb5535583f65d05f51ff3047463Df
f43e7c1792d357cd5fb1ac5a13e744a5ba50e7309444d7ab7d0149227755b575De
f6c854fef6008f3f063c3ed1c4f6a2e51821b5fe057282702dfcd15b7783bd41Dd
87d3a6a27aa6179e43d778cec0765e166b68510a391d6eea5236b2e70d6d746bDc
fdb600cfe62d10fb9b78089a4daae03dd3010232a321c952510faa95723d5a60Db
dd3bfb74354db34116d2bb2b298b233f3d005acdb7709c1ea17dd9dede2e0566Da
d1870d7298e93c62411f7b0b728df981e13f75ca9fdac1fb117b0e2d50d3b71fD`
2924951f311fafa5d17831ab4e1bd85bee2bd6d9ed591445149b5fd70152d077D_
4552c0e9031fc5f990a165feb17e2cd243461f760cb80e75769c837d1052f193D^
8908f58fb71fd39056da9b792dd69e358735856d43352a085ffea8b4b8f2039e
# xr # t/wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z.{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g-{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken serversm,{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q+{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake*{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
w w 6{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m5{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q4{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake3{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)2{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)1{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d0wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)
$ <{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214);{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215):{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d9wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t8wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z7{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
5 C{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)B{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)A{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)?@}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)?{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m>{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q={kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
J}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pI}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)H}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?G}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)F{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mE{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qD{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrf ?P}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)O{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mN{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qM{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeL{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)K{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
b b]F b mW{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qV{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeU{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)TqStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)S}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pR}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)Q}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
x d x ]sStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)\}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p[}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)Z}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?Y}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)X{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
r/ pd}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)c}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?b}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)a{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m`{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q_{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
^s#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)
nZ xiw}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)Hhs Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
gs#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)fsStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)e}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)
~ zy ~ gp{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
o{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[nwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,mwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){lwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rkwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)jwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)
b b ,vwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){uwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rtwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)swPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)trwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zq{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
V 2 V r}wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d|wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t{wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zz{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gy{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
x{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase
{ ty { z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[ wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){~wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)
} " l }
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[ wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)
L !2 L [wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t
wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z {{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g {WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
o) {Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)
# ni # d wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z {{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g {WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)q{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
x^z g%{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken serversm${cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q#{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake"{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)!{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215) {Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
e r+V: e Dw
ad525efce24792177db9c59af54a5822206dc0ec6f5b18770062ca07e51ac4caDv
f2cbc4c0d7d808554f9689174450c43f80db727c186bd3a1980494886a25212aDu
0834c02bc349eaabe64a4015d07ee7cbcf7776a68766e81cd93be0a58c7d5465Dt
43f50cb7c44309253c847a258d592992e250678cda19887c482849bd67b447e3Ds
461bf2c4280e37fa28f8577583cf56315e10dc6a8898497da766b5dffbdb1a56Dr
797abce4232e5ed3353b7d0733cce5d5aea1134edf9acaa37b6028ef6bcfbc3dDq
6c2a1f394c23865716bd975554c638950ef8bb2b3efd23074290f41ebd724f20Dp
2c9324974a8a0cabc911ea21fe71581d404b5d397c0c010f06880df10520bbf3Do
a6c934448f1ad13c105abb9c4606317935bd853ff0ba1a80735013b194ee0643Dn
41923a544cdeeda959457ff656dfdd7e871d90f2d4f234055c2bb0f1f3996609Dm
4f2f74c8de47efbfeea14ccb4e01899a829a67121a6963532b82205d11eaea8bDl
f59ceed71d088a420b5ecc67bc4a13df798f7d3d12556a27285fb4dfd594850eDk
74038c223561306541466c5407569dcc8055567f3cc9a56e7ec106015d2df942
$ +{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)*{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d(wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t'wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z&{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
2{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d1wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t0wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z/{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624).{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m-{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q,{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
xrf 9{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)?8}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)7{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m6{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q5{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake4{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)3{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
xrf ??}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)>{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m={cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q<{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake;{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214):{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
_ b]C _ mF{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qE{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeD{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)C{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)B}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pA}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)@}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
y d y LqStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)K}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)pJ}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)I}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?H}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)G{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
n+ pS}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)R}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)?Q}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)P{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mO{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qN{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistakeM{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
nZv ?Z}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)Y{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)mX{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)qW{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
Vs#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)UsStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)T}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)
I b]I
_s#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)^sStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d@- Prevent the cache going over the configured limit (CVE-2023-2828)]}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c- Tighten cache protection against record from forwarders (CVE-2021-25220)p\}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c- Include test of forwarders (CVE-2021-25220)[}9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
9> {dwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rcwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)bwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)xaw}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h- Allow conflicting zone files with a warning (#1744081)H`s Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
Pa tjwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zi{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gh{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
g{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[fwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,ewcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
~ zy ~ gq{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
p{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[owCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,nwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){mwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)rlwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)kwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku- Do not crash when nsupdate with GSS terminated early (#1300636)
# $1 # [xwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase,wwcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617){vwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)ruwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)dtwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)tswuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)zr{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
# o) # {wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r
@- Solve often priming queries on some forwarder (#1756201)~{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d}wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t|wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)gz{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
y{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)
Pa dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase, wcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^x- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)
" x " t
wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z {{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g {WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)[ wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ- Add CVE tests to codebase{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
g{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken servers
{!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^- rebinding protection for forwarding DNS server upstream patch (#1832812)q{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)
$ {#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215){Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
N = N !{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_:- Fix inline re-signing (#rh1889902)t wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)z {{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)g {WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^@- Fix EDNS512 loops on broken serversm {cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake
U xrf U (g9Nick Clifton <nickc@redhat.com> 2.27-36.base\4- Prevent resource exhaustion attacks on libiberty's name demangling code. (#1598561){'gNick Clifton <nickc@redhat.com> 2.27-35.base\4- Stop strip crashing when removing .comment sections. (#1644632)&{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)m%{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah- Prevent a race after zone load (#2011220)q${kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`@- Apply again patch 172, got removed by mistake#{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`Z- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)"{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`- Possible assertion failure on DNAME processing (CVE-2021-25215)
e r+V: e D
8e35267d29e2ee8a7d9678927b89dd4a07137e32a7f920844428b1f94aaf2c97D
0f2b2ab9e05c1447b23d28c2912f8057c494168f4eed17e7d868e5970436722dD
580edd83e305e9b58fb0cceca959a21a8c59ccd3bc075f075211019108f73863D
ebf604edce00a3a3778207eeaac06a3de226dbf62bfb987ed00584aa8d736ea1D
d9c97d1412cfdb3b24b2aca08bec9bed63be4db9461f19ba0eef840ad48dc19eD
9e472e05a5fca129f0efc2c81b7fc14f5daa96935b5c693cead447474422f17fD~
6f1a8e6e9202d70c194d4aaed3c034d719a85eb53ac63f8c6235756a9646a2faD}
e51d2de57b856312d8eb1bbf6ee6b7ac8f910ebf5d7e0b516012d5d9c31c7853D|
64ec5a21e706505bd67ed2ff5da8b90fcfb71ea07550d90a777323f49c8ee5d9D{
f17b58dd383483f1592c8c3c0bf814ed80d208d19a254620ec541a14c9f5f144Dz
20887cda88d458e236a1d13d68fb01b10056907594d573f0342d40b9bd677d37Dy
b88c8339f9ad90d0855cda0072a67860549759e8870cc9abc61555e4d4ef4f61Dx
db4dac1347f0a7c37ce54b990ae4be455c6c016e54d0a315f1e2cbefcefd3073
zy .gWNick Clifton <nickc@redhat.com> 2.27-42.base]w@- Stop the BFD library from complaining about sections with multiple sets of relocations. (#1749085)-g?Nick Clifton <nickc@redhat.com> 2.27-41.base\r@- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch. (#1699745)h,gmNick Clifton <nickc@redhat.com> 2.27-40.base\N- Enable gold for PowerPC and s390x. (#1670014)+g7Nick Clifton <nickc@redhat.com> 2.27-39.base\<y- Fix a potential illegal memory access triggered by an integer overflow. (#1665884)s*gNick Clifton <nickc@redhat.com> 2.27-38.base\4- Disable optimizations of x06_64 PLT entries. (#1624779){)gNick Clifton <nickc@redhat.com> 2.27-37.base\4- Add the .attach-to-group pseudo-op to the assembler. (#1652587)
v s4gNick Clifton <nickc@redhat.com> 2.27-38.base\4- Disable optimizations of x06_64 PLT entries. (#1624779){3gNick Clifton <nickc@redhat.com> 2.27-37.base\4- Add the .attach-to-group pseudo-op to the assembler. (#1652587)2g9Nick Clifton <nickc@redhat.com> 2.27-36.base\4- Prevent resource exhaustion attacks on libiberty's name demangling code. (#1598561){1gNick Clifton <nickc@redhat.com> 2.27-35.base\4- Stop strip crashing when removing .comment sections. (#1644632)0oNick Clifton <nickc@redhat.com> - 2.27-44.base.1ar- Add ability to control the display of unicode characters. (#2009168)m/guNick Clifton <nickc@redhat.com> 2.27-44.base^E:@- Allow the BFD library to handle the copying of files which contain secondary reloc sections. (#1785294)
- Implement assembler workaround for Intel JCC microcode bug. (#1778892)
R nm R :oNick Clifton <nickc@redhat.com> - 2.27-44.base.1ar- Add ability to control the display of unicode characters. (#2009168)m9guNick Clifton <nickc@redhat.com> 2.27-44.base^E:@- Allow the BFD library to handle the copying of files which contain secondary reloc sections. (#1785294)
- Implement assembler workaround for Intel JCC microcode bug. (#1778892) 8gWNick Clifton <nickc@redhat.com> 2.27-42.base]w@- Stop the BFD library from complaining about sections with multiple sets of relocations. (#1749085)7g?Nick Clifton <nickc@redhat.com> 2.27-41.base\r@- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch. (#1699745)h6gmNick Clifton <nickc@redhat.com> 2.27-40.base\N- Enable gold for PowerPC and s390x. (#1670014)5g7Nick Clifton <nickc@redhat.com> 2.27-39.base\<y- Fix a potential illegal memory access triggered by an integer overflow. (#1665884)
h qi h Ag?Nick Clifton <nickc@redhat.com> 2.27-41.base\r@- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch. (#1699745)h@gmNick Clifton <nickc@redhat.com> 2.27-40.base\N- Enable gold for PowerPC and s390x. (#1670014)?g7Nick Clifton <nickc@redhat.com> 2.27-39.base\<y- Fix a potential illegal memory access triggered by an integer overflow. (#1665884)s>gNick Clifton <nickc@redhat.com> 2.27-38.base\4- Disable optimizations of x06_64 PLT entries. (#1624779){=gNick Clifton <nickc@redhat.com> 2.27-37.base\4- Add the .attach-to-group pseudo-op to the assembler. (#1652587)<g9Nick Clifton <nickc@redhat.com> 2.27-36.base\4- Prevent resource exhaustion attacks on libiberty's name demangling code. (#1598561){;gNick Clifton <nickc@redhat.com> 2.27-35.base\4- Stop strip crashing when removing .comment sections. (#1644632)
+ ^m. + WHeMJosef Ridky <jridky@redhat.com> - 0:1.8.18-4X+- Fix RPMDiff issues and rebuild%GegJosef Ridky <jridky@redhat.com> - 0:1.8.18-3X@- Fix issues with warning: dereferencing type-punned pointer
will break strict-aliasing rules from RPMDiffRFeCJosef Ridky <jridky@redhat.com> - 0:1.8.18-2X- Fix issue in file sources_Ee]Josef Ridky <jridky@redhat.com> - 0:1.8.18-1X @- New upstream release 1.8.18 (#1398658)DoNick Clifton <nickc@redhat.com> - 2.27-44.base.1ar- Add ability to control the display of unicode characters. (#2009168)mCguNick Clifton <nickc@redhat.com> 2.27-44.base^E:@- Allow the BFD library to handle the copying of files which contain secondary reloc sections. (#1785294)
- Implement assembler workaround for Intel JCC microcode bug. (#1778892) BgWNick Clifton <nickc@redhat.com> 2.27-42.base]w@- Stop the BFD library from complaining about sections with multiple sets of relocations. (#1749085)
D ' D ROeCJosef Ridky <jridky@redhat.com> - 0:1.8.18-2X- Fix issue in file sources NkSPavel Cahyna <pcahyna@redhat.com> - 0:1.8.18-10a{- Protect against negative values to memmove that caused
"ipmitool sol activate" to crash against an IBM DataPower appliance
(#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
Cherry-picked from upstream PR#78.iMscVáclav Doležal <vdolezal@redhat.com> - 0:1.8.18-9^_@- Disable -fstrict-aliasing (RPMDiff issue)^LsMVáclav Doležal <vdolezal@redhat.com> - 0:1.8.18-8^^F- Backport fix for CVE-2020-5208oKe}Josef Ridky <jridky@redhat.com> - 0:1.8.18-7Zy- Remove debug prints shown without -v option (#1483163)Je=Josef Ridky <jridky@redhat.com> - 0:1.8.18-6Y{- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)oIe}Josef Ridky <jridky@redhat.com> - 0:1.8.18-5Xs- Remove RPMDiff fix file (#1439269) related to #1398658
W$ iVscVáclav Doležal <vdolezal@redhat.com> - 0:1.8.18-9^_@- Disable -fstrict-aliasing (RPMDiff issue)^UsMVáclav Doležal <vdolezal@redhat.com> - 0:1.8.18-8^^F- Backport fix for CVE-2020-5208oTe}Josef Ridky <jridky@redhat.com> - 0:1.8.18-7Zy- Remove debug prints shown without -v option (#1483163)Se=Josef Ridky <jridky@redhat.com> - 0:1.8.18-6Y{- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)oRe}Josef Ridky <jridky@redhat.com> - 0:1.8.18-5Xs- Remove RPMDiff fix file (#1439269) related to #1398658WQeMJosef Ridky <jridky@redhat.com> - 0:1.8.18-4X+- Fix RPMDiff issues and rebuild%PegJosef Ridky <jridky@redhat.com> - 0:1.8.18-3X@- Fix issues with warning: dereferencing type-punned pointer
will break strict-aliasing rules from RPMDiff
<ZwRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}Y
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]wXg Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-11d- Add upstream ipmievd patch to check received msg id against expectation
Fixes problem where SEL response is not recognized correctly
when SEL request times out
Resolves: rhbz#2224569 WkSPavel Cahyna <pcahyna@redhat.com> - 0:1.8.18-10a{- Protect against negative values to memmove that caused
"ipmitool sol activate" to crash against an IBM DataPower appliance
(#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
Cherry-picked from upstream PR#78.
I K\}Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]3[eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
t^gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]i]QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
-`WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]M_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
? ? Kc}Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681] b9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]LaRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
tegRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]idQRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
-gWRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]MfRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
i9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]LhRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
2 k1Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f ԃJjRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
= MmRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}?l{Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
O LoRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}-nWRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]
r1Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f JqRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) p9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
= = ?s{Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
dtERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
r -r 7vkRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]OuRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
Px Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol ݅^w9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
; ; 9zo Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow tye Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
{ { |7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han X{- Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
f}I Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
p p ~ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
oY Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
q ] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
dERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
r -r r |uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]7kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
Z }wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}"ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]
# # ?
{Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]ef@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}4 eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
Z B
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}" ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]| uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]
}wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]
4eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
bARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
( o( "ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] 7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens
}wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}
4eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
bARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
o + MRadomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919] 7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han
f IAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
p p !Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
o"YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
q#]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
/ / R% Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE ^$7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
- - O&Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]
( (1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]T'#Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]
e r+V: e D
6652fd59e1328ff5e8f2141d6e091685a4e2cb80366a0f729537fb40a17779b8D
168cb87176ec6a7a6805dcccc50c34a22945c1ebfd027164ff0028a1a140a637D
388ece9ac8d1f44fa207868af7af9df39a1479ce72301c159bfb9ed3f436fd61D
f2dc09932d5afec99bdc35c39f858385a06e600f3b989133d348ed00959ba429D
19575eb2feb5e29ed339c078e462e2a4ac7a44f0888328185fc248a30681b82eD
5b19e42e03ab5ffdc24e71ec6c71dd0d4c8a557e482b142cb58bd7eaf529174aD
e07580dc20cee29ddae2c26b7d4782a6e7671477d7f4ae210d2cef6cc71555cbD
8b60c6a9194e57ad101ad2a28015f644b915aa5c958a5f8b0e68def14394fa13D
479b38bee7280885a7df789a1472c2d43e1a0103f8607f0e6d3fb26c2ae13423D
bfe191b783a11c70daf05fb86e81e2e36d80b7dec5eb2243fa223700ce330824D
a6119606e76fc09a37585914c2063026064b1b979d9cffcf71712c2218b4c3c2D
d8f18b1da519f3d475ad00269e3908ecb8abedc91f0754a3a8a6aa8b624b04ddD
f1ba2741b87027c8c0f29b9262bb396c142986c3ad3c68f88e90f34cb028b6de
C C *sJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check J)s#Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
E
E D,sJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}o+smJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
e he j/scJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840].s1Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []-s7Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
6 1+Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]F0sJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
3sJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check ^29Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] of Uflrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| ̧^ ͧ` Χc Чe ѧg ҧi ӧk էm ֧o קr ٧s ڧt ۧv ܧx ߧz | } ~
! " # % & ( * , / 1 3 5
8 : ;
= ? A B C D E F H I J K L M O !Q #R $S %T &U (V )X *Y +Z ,\ -] ._ /a 0b 1c 2d 3e 4f 5g 6h 8j 9l :n <p =r >s ?t @u Aw By Cz D{ E| F} G H I J K L M
O P
Q R T to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
E
E D5sJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}o4smJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
e he j8scJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]7s1Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []6s7Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
6 :+Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]F9sJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
^;9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]
y y ^=7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]!<?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
O?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]R> Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE
A ( A [A1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 T@#Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
bB?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4CcAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
2 2 JDAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
2 2 JEAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
FAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
A ( A [H1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 TG#Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
bI?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4JcAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
2 2 JKAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
2 2 JLAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
MAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
M M /OYAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|NsAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
b Ib [Q1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 "3PaAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele) ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
bR? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4Sc Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
2 2 JT Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
2 2 JU Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
V Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend '
M M /XY Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|Ws Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
I I 3Ya Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
B B :Zo Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
M M /\Y
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|[s
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
I I 3]a
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
6 B 6 _
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli):^o
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
1 1 a
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]@`{
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)
> > >bw
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
c#
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
/ / Md
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]
u u e Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]
> > >fw Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
g# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
/ / Mh Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
, j' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}Hi Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP 7
U { U "l? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]k} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
. . n- Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]1m] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
, p' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}Ho Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP ;
U { U "r? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]q} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
1s] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
t Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
u Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
0 0 2w_ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]v' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
] y}
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] x9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
"z?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]
1{]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
|
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
}
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
0 0 2_
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]~'
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
] 9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
0 0 2_Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]'Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
] 9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
3 3 I
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
n n Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 N
p p
9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]i QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
Z 9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]
3 3 I
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
n n Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 S
iQRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
E E 7mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
!ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
n n Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 Y
iQRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
E E 7mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
! ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]
r fr p _Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] +Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}
" !+Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}n [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig aZ 3Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] bet() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush cif write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r deform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
. n$[Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig fZ#3Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]p"_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] get() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush hif write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r ieform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
d }d
&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 k%}Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
@ ( Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}<'wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
& S& ,s1Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []+s7Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]%*IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] )Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}
e r+V: e D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.sJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]j-scJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]
/+Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]
P1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol r^09Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
; ; 93oAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow ut2eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command s erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
5 5 n5[Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig wX4-Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} xet() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush yif write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r zeform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
d }d
7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 |6}Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
@ 9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}<8wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
S S %;IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] :Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\<7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT
Q Q +=URado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
) ) S>%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
vr %AIRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] @Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}? Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\B7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT
Q Q +CURado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
) ) SD%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
s D s MGRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%FIRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}E Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
8 8 DHRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
) ) SI%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
s D s MLRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%KIRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}J Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
8 8 DMRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
' w ' LORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]N Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
e
RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]Q)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]P-Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
' w ' LTRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]S Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
e &XKRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]V)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]U-Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
z z Z#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]lYWRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T['Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
7 _Q' 7 l_WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&^KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000] \9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
j j `#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
Ta'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
I _ I c#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] b9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
Q* BfRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 +dURado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
P P i#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]lhWRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&gKRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] of flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| V W X Z [ \ ] ^ _ `! e$ j& l( m, o. p/ q1 t3 v5 {7 }9 ~; < = > A B C D G H I L M O R T X Z [ _ ` a c f i j l o q r t w x y { } ~ ª ê Ī Ū ƪ Ȫ ɪ ʪ ˪ ͪ Ϊ Ъ Ѫ! Ҫ$ Ӫ' Ԫ) ֪+ ת. ܪ0 ު2 ߪ5 < F P Z d n v {
# & ) * + - . 1 2
3 5 6 7 > D cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
Tj'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
I _ I l#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] k9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
Q* BoRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 +mURado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
q#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]LpRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
Tr'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
I _ I t#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] s9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
Q* BwRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 +uURado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
LxRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]
' ' Uy)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
{Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 z Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
j j L}Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]B|Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]
' ' U~)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
i QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
< < @Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
c 7mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc 1Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
y y LRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]3eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
' ' U)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
iQRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
< < @ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
c 7 mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc Dž
1Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
H +H _=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]
3Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3 eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
iQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
< < @ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
c 7m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc ̅1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
+H 7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
Y Y 1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
=h _ = Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890] 3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]7m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc
`VK <!w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] 7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]
If $7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_#= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]3"e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
+ + <'w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}&
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]
I K)} Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]3(e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
t+g Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]i*Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
.s Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono ڊ -s! Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do clean قM, Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
e r+V: e D+
d56f208cb0a3f9404c7aa65a34d04ff637f76d4517d2f68c4c63ec940a0806a5D*
04dce9028a87d078c3036031ae186db04fd35a585bd35d7aa2fcc7c8300830edD)
a99bb11d5187d473fbf1ceddf45f95459a860863d190605924743cdb4f34261bD(
7c67eafa7cee5c39a41ff1aeb7d5cd4d764c1967ad0cc0795ad34e1d63727f0eD'
58d8a7b6d0fdb9777df76fd29a92c1c249ab8fe602e217d454e4b89dd8a82452D&
d30f35b56aec811e1b348312a8f58d2e793a4c89f8e25ac9155a5e74a0d04b90D%
1b927fc58d94ad45dc78d0926b1fb83cae72958110a6ebfa24f75a5d5a9a4b4dD$
37c1fc32da75405bdcca093c9fce198c021c7868450f7b272aed38def708857dD#
518ebaac264e510836e723892b0b9982787bf6b242d9843e5ab09ecc5c9f642aD"
4857df90d4f9aa3520255aef6c5bdbe887f7cdaae0d006c15b15db7c418b372fD!
ad182b2b1a28f50e4030294d1ad1de624300da1440a08ecc9180070cc3c2b076D
149c020747f7a669eb88245d5064fa806ac7462e9cdd3a6c05414ff08bdd43e7D
86101a94927cf01319d801575aa4ea26e63efa577a5431856e0329f06a994596 up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} v) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]
C C 0s Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check ݆J/s# Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
E
E D2s Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}o1sm Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
e he j5sc Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]4s1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []3s7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
6w( v Z<iO Peter Robinson <pbrobinson@redhat.com> 3.8.0-8S- Fix dependencies on own libraryL;]? Daniel Mach <dmach@redhat.com> - 3.8.0-7RU- Mass rebuild 2014-01-24`:_e Zeeshan Ali <zeenix@redhat.com> - 3.8.0-6R@- Add dep on own library (related: #1045140)L9]? Daniel Mach <dmach@redhat.com> - 3.8.0-5Rk- Mass rebuild 2013-12-27_8_c Zeeshan Ali <zeenix@redhat.com> - 3.8.0-4Rj- Complete translations (related: #1030319)Z7_Y Zeeshan Ali <zeenix@redhat.com> - 3.8.0-3R{- Fix ISRC handling (related: #861191)F6s Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
f ?&u f ZFiO!Peter Robinson <pbrobinson@redhat.com> 3.8.0-8S- Fix dependencies on own libraryLE]?!Daniel Mach <dmach@redhat.com> - 3.8.0-7RU- Mass rebuild 2014-01-24`D_e!Zeeshan Ali <zeenix@redhat.com> - 3.8.0-6R@- Add dep on own library (related: #1045140)LC]?!Daniel Mach <dmach@redhat.com> - 3.8.0-5Rk- Mass rebuild 2013-12-27_B_c!Zeeshan Ali <zeenix@redhat.com> - 3.8.0-4Rj- Complete translations (related: #1030319)ZA_Y!Zeeshan Ali <zeenix@redhat.com> - 3.8.0-3R{- Fix ISRC handling (related: #861191)V@aO David King <dking@redhat.com> - 3.12.2-5.1aTU@- Fix BD-R media flags (#2053594)`?i[ Richard Hughes <rhughes@redhat.com> - 3.12.2-5[)- Update to 3.12.2
- Resolves: #1569810[>]] David King <dking@redhat.com> - 3.12.1-2U[%- Rebuild for totem-pl-parser (#1222884)`=i[ Richard Hughes <rhughes@redhat.com> - 3.12.1-1UG_@- Update to 3.12.1
- Resolves: #1174577
f ?&u f ZPiO"Peter Robinson <pbrobinson@redhat.com> 3.8.0-8S- Fix dependencies on own libraryLO]?"Daniel Mach <dmach@redhat.com> - 3.8.0-7RU- Mass rebuild 2014-01-24`N_e"Zeeshan Ali <zeenix@redhat.com> - 3.8.0-6R@- Add dep on own library (related: #1045140)LM]?"Daniel Mach <dmach@redhat.com> - 3.8.0-5Rk- Mass rebuild 2013-12-27_L_c"Zeeshan Ali <zeenix@redhat.com> - 3.8.0-4Rj- Complete translations (related: #1030319)ZK_Y"Zeeshan Ali <zeenix@redhat.com> - 3.8.0-3R{- Fix ISRC handling (related: #861191)VJaO!David King <dking@redhat.com> - 3.12.2-5.1aTU@- Fix BD-R media flags (#2053594)`Ii[!Richard Hughes <rhughes@redhat.com> - 3.12.2-5[)- Update to 3.12.2
- Resolves: #1569810[H]]!David King <dking@redhat.com> - 3.12.1-2U[%- Rebuild for totem-pl-parser (#1222884)`Gi[!Richard Hughes <rhughes@redhat.com> - 3.12.1-1UG_@- Update to 3.12.1
- Resolves: #1174577
f ?&u f ZZiO#Peter Robinson <pbrobinson@redhat.com> 3.8.0-8S- Fix dependencies on own libraryLY]?#Daniel Mach <dmach@redhat.com> - 3.8.0-7RU- Mass rebuild 2014-01-24`X_e#Zeeshan Ali <zeenix@redhat.com> - 3.8.0-6R@- Add dep on own library (related: #1045140)LW]?#Daniel Mach <dmach@redhat.com> - 3.8.0-5Rk- Mass rebuild 2013-12-27_V_c#Zeeshan Ali <zeenix@redhat.com> - 3.8.0-4Rj- Complete translations (related: #1030319)ZU_Y#Zeeshan Ali <zeenix@redhat.com> - 3.8.0-3R{- Fix ISRC handling (related: #861191)VTaO"David King <dking@redhat.com> - 3.12.2-5.1aTU@- Fix BD-R media flags (#2053594)`Si["Richard Hughes <rhughes@redhat.com> - 3.12.2-5[)- Update to 3.12.2
- Resolves: #1569810[R]]"David King <dking@redhat.com> - 3.12.1-2U[%- Rebuild for totem-pl-parser (#1222884)`Qi["Richard Hughes <rhughes@redhat.com> - 3.12.1-1UG_@- Update to 3.12.1
- Resolves: #1174577
f ?&u f ZdiO$Peter Robinson <pbrobinson@redhat.com> 3.8.0-8S- Fix dependencies on own libraryLc]?$Daniel Mach <dmach@redhat.com> - 3.8.0-7RU- Mass rebuild 2014-01-24`b_e$Zeeshan Ali <zeenix@redhat.com> - 3.8.0-6R@- Add dep on own library (related: #1045140)La]?$Daniel Mach <dmach@redhat.com> - 3.8.0-5Rk- Mass rebuild 2013-12-27_`_c$Zeeshan Ali <zeenix@redhat.com> - 3.8.0-4Rj- Complete translations (related: #1030319)Z__Y$Zeeshan Ali <zeenix@redhat.com> - 3.8.0-3R{- Fix ISRC handling (related: #861191)V^aO#David King <dking@redhat.com> - 3.12.2-5.1aTU@- Fix BD-R media flags (#2053594)`]i[#Richard Hughes <rhughes@redhat.com> - 3.12.2-5[)- Update to 3.12.2
- Resolves: #1569810[\]]#David King <dking@redhat.com> - 3.12.1-2U[%- Rebuild for totem-pl-parser (#1222884)`[i[#Richard Hughes <rhughes@redhat.com> - 3.12.1-1UG_@- Update to 3.12.1
- Resolves: #1174577
f ?&u f ZniO%Peter Robinson <pbrobinson@redhat.com> 3.8.0-8S- Fix dependencies on own libraryLm]?%Daniel Mach <dmach@redhat.com> - 3.8.0-7RU- Mass rebuild 2014-01-24`l_e%Zeeshan Ali <zeenix@redhat.com> - 3.8.0-6R@- Add dep on own library (related: #1045140)Lk]?%Daniel Mach <dmach@redhat.com> - 3.8.0-5Rk- Mass rebuild 2013-12-27_j_c%Zeeshan Ali <zeenix@redhat.com> - 3.8.0-4Rj- Complete translations (related: #1030319)Zi_Y%Zeeshan Ali <zeenix@redhat.com> - 3.8.0-3R{- Fix ISRC handling (related: #861191)VhaO$David King <dking@redhat.com> - 3.12.2-5.1aTU@- Fix BD-R media flags (#2053594)`gi[$Richard Hughes <rhughes@redhat.com> - 3.12.2-5[)- Update to 3.12.2
- Resolves: #1569810[f]]$David King <dking@redhat.com> - 3.12.1-2U[%- Rebuild for totem-pl-parser (#1222884)`ei[$Richard Hughes <rhughes@redhat.com> - 3.12.1-1UG_@- Update to 3.12.1
- Resolves: #1174577
?5A v&Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-4Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildWucO&Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-3P"T- Include URL to the license textt&Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-2P@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildKsk/&Tom Callaway <spot@fedoraproject.org> - 1.9.1-1OR- update to 1.9.1VraO%David King <dking@redhat.com> - 3.12.2-5.1aTU@- Fix BD-R media flags (#2053594)`qi[%Richard Hughes <rhughes@redhat.com> - 3.12.2-5[)- Update to 3.12.2
- Resolves: #1569810[p]]%David King <dking@redhat.com> - 3.12.1-2U[%- Rebuild for totem-pl-parser (#1222884)`oi[%Richard Hughes <rhughes@redhat.com> - 3.12.1-1UG_@- Update to 3.12.1
- Resolves: #1174577
F& M{_?&Daniel Mach <dmach@redhat.com> - 1.10.0-3RU- Mass rebuild 2014-01-24Mz_?&Daniel Mach <dmach@redhat.com> - 1.10.0-2Rk- Mass rebuild 2013-12-27 yeU&Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1Q- New upstream release 1.10
- Obsolete upstreamed patches
- Amend the multilib patch, there's no need to patch configure since we
are running autoreconf anyways
- https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTESxc%&Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-6Qf- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally/wc}&Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5Qf- Apply a patch by Stephen Gallagher to patch autoconf, not configure to
allow optflags to be passed in by build environment
- Run autoreconf before configure
- git rm obsolete patches
- Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR
L [
s L /c}'Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5Qf- Apply a patch by Stephen Gallagher to patch autoconf, not configure to
allow optflags to be passed in by build environment
- Run autoreconf before configure
- git rm obsolete patches
- Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR 'Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-4Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildWcO'Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-3P"T- Include URL to the license text~'Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-2P@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildK}k/'Tom Callaway <spot@fedoraproject.org> - 1.9.1-1OR- update to 1.9.1!|qS&Alexey Tikhonov <atikhono@redhat.com> - 1.10.0-3.1d@- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z]
, yY , (Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-2P@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildKk/(Tom Callaway <spot@fedoraproject.org> - 1.9.1-1OR- update to 1.9.1!qS'Alexey Tikhonov <atikhono@redhat.com> - 1.10.0-3.1d@- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z]M_?'Daniel Mach <dmach@redhat.com> - 1.10.0-3RU- Mass rebuild 2014-01-24M_?'Daniel Mach <dmach@redhat.com> - 1.10.0-2Rk- Mass rebuild 2013-12-27 eU'Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1Q- New upstream release 1.10
- Obsolete upstreamed patches
- Amend the multilib patch, there's no need to patch configure since we
are running autoreconf anyways
- https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTESc%'Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-6Qf- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally
2 R 2
eU(Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1Q- New upstream release 1.10
- Obsolete upstreamed patches
- Amend the multilib patch, there's no need to patch configure since we
are running autoreconf anyways
- https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES c%(Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-6Qf- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally/ c}(Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5Qf- Apply a patch by Stephen Gallagher to patch autoconf, not configure to
allow optflags to be passed in by build environment
- Run autoreconf before configure
- git rm obsolete patches
- Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR
(Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-4Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildW cO(Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-3P"T- Include URL to the license text
`my )Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-4Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildWcO)Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-3P"T- Include URL to the license text)Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-2P@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildKk/)Tom Callaway <spot@fedoraproject.org> - 1.9.1-1OR- update to 1.9.1!qS(Alexey Tikhonov <atikhono@redhat.com> - 1.10.0-3.1d@- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z]M_?(Daniel Mach <dmach@redhat.com> - 1.10.0-3RU- Mass rebuild 2014-01-24M_?(Daniel Mach <dmach@redhat.com> - 1.10.0-2Rk- Mass rebuild 2013-12-27
F& M_?)Daniel Mach <dmach@redhat.com> - 1.10.0-3RU- Mass rebuild 2014-01-24M_?)Daniel Mach <dmach@redhat.com> - 1.10.0-2Rk- Mass rebuild 2013-12-27 eU)Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1Q- New upstream release 1.10
- Obsolete upstreamed patches
- Amend the multilib patch, there's no need to patch configure since we
are running autoreconf anyways
- https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTESc%)Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-6Qf- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally/c})Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5Qf- Apply a patch by Stephen Gallagher to patch autoconf, not configure to
allow optflags to be passed in by build environment
- Run autoreconf before configure
- git rm obsolete patches
- Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR
z [:w z i?*Bob Relyea <rrelyea@redhat.com> - 2019.2.32-76] - Update to CKBI 2.32 from NSS 3.44
- Removing:
- # Certificate "Visa eCommerce Root"
- [ gS*Kai Engert <kaie@redhat.com> - 2018.2.22-70.0Z- Update to CKBI 2.22 from NSS 3.35[ cW*Kai Engert <kaie@redhat.com> - 2017.2.20-71Z @- Update to CKBI 2.20 from NSS 3.34.1b ce*Kai Engert <kaie@redhat.com> - 2017.2.18-71Y@- Update to CKBI 2.18 (pre-release snapshot)? c *Kai Engert <kaie@redhat.com> - 2017.2.16-71YA@- Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
Mozilla removed code signing trust from all CAs (rhbz#1472933)[cW*Kai Engert <kaie@redhat.com> - 2017.2.14-71Y.- Update to CKBI 2.14 from NSS 3.30.2!qS)Alexey Tikhonov <atikhono@redhat.com> - 1.10.0-3.1d@- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z] # Certificate "AC Raiz Certicamara S.A."
- # Certificate "TC TrustCenter Class 3 CA II"
- # Certificate "ComSign CA"
- # Certificate "S-TRUST Universal Root CA"
- # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
- # Certificate "Certplus Root CA G1"
- # Certificate "Certplus Root CA G2"
- # Certificate "OpenTrust Root CA G1"
- # Certificate "OpenTrust Root CA G2"
- # Certificate "OpenTrust Root CA G3"
- Adding:
- # Certificate "GlobalSign Root CA - R6"
- # Certificate "OISTE WISeKey Global Root GC CA"
- # Certificate "GTS Root R1"
- # Certificate "GTS Root R2"
- # Certificate "GTS Root R3"
- # Certificate "GTS Root R4"
- # Certificate "UCA Global G2 Root"
- # Certificate "UCA Extended Validation Root"
- # Certificate "Certigna Root CA"
- # Certificate "emSign Root CA - G1"
- # Certificate "emSign ECC Root CA - G3"
- # Certificate "emSign Root CA - C1"
- # Certificate "emSign ECC Root CA - C3"
- # Certificate "Hongkong Post Root CA 3"
9 9 }#i*Bob Relyea <rrelyea@redhat.com> - 2021.2.50-71`- Update to CKBI 2.50 from NSS 3.67
- version number update onlyN"i5*Bob Relyea <rrelyea@redhat.com> - 2021.2.48-71`P@- Update to CKBI 2.48 from NSS 3.66
- Removing:
- # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
- # Certificate "G e!ic*Bob Relyea <rrelyea@redhat.com> - 2020.2.41-79^y- Update to CKBI 2.41 from NSS 3.53.0
- Removing:
- # Certificate "AddTrust Low-Value Services Root"
- # Certificate "AddTrust External Root"
- # Certificate "UTN USERFirst Email Root CA"
- # Certificate "Certplus Class 2 Primary CA"
- # Certificate "Deutsche Telekom Root CA 2"
- # Certificate "Staat der Nederlanden Root CA - G2"
- # Certificate "Swisscom Root CA 2"
- # Certificate "Certinomis - Root CA"
- Adding:
- # Certificate "Entrust Root Certification Authority - G4"
- fix permissions on ghosted files. eoTrust Global CA"
- # Certificate "GeoTrust Universal CA"
- # Certificate "GeoTrust Universal CA 2"
- # Certificate "QuoVadis Root CA"
- # Certificate "Sonera Class 2 Root CA"
- # Certificate "Taiwan GRCA"
- # Certificate "GeoTrust Primary Certification Authority"
- # Certificate "thawte Primary Root CA"
- # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
- # Certificate "GeoTrust Primary Certification Authority - G3"
- # Certificate "thawte Primary Root CA - G2"
- # Certificate "thawte Primary Root CA - G3"
- # Certificate "GeoTrust Primary Certification Authority - G2"
- # Certificate "VeriSign Universal Root Certification Authority"
- # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
- # Certificate "Trustis FPS Root CA"
- # Certificate "EE Certification Centre Root CA"
- # Certificate "LuxTrust Global Root 2"
- # Certificate "Symantec Class 1 Public Primary Certification Autho rity - G4"
- # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
- Adding:
- # Certificate "Microsoft ECC Root Certificate Authority 2017"
- # Certificate "Microsoft RSA Root Certificate Authority 2017"
- # Certificate "e-Szigno Root CA 2017"
- # Certificate "certSIGN Root CA G2"
- # Certificate "Trustwave Global Certification Authority"
- # Certificate "Trustwave Global ECC P256 Certification Authority"
- # Certificate "Trustwave Global ECC P384 Certification Authority"
- # Certificate "NAVER Global Root Certification Authority"
- # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
- # Certificate "GlobalSign Secure Mail Root R45"
- # Certificate "GlobalSign Secure Mail Root E45"
- # Certificate "GlobalSign Root R46"
- # Certificate "GlobalSign Root E46"
- # Certificate "GLOBALTRUST 2020"
- # Certificate "ANF Secure Server Root CA"
- # Certificate "Certum EC-384 CA"
- # Certificate "Certum Trusted Root CA"
w tw &i?+Bob Relyea <rrelyea@redhat.com> - 2019.2.32-76] - Update to CKBI 2.32 from NSS 3.44
- Removing:
- # Certificate "Visa eCommerce Root"
- [%gS+Kai Engert <kaie@redhat.com> - 2018.2.22-70.0Z- Update to CKBI 2.22 from NSS 3.35$i)*Bob Relyea <rrelyea@redhat.com> - 2021.2.50-72a@- Fix expired certificate.
- Removing:
- # Certificate "DST Root CA X3" # Certificate "AC Raiz Certicamara S.A."
- # Certificate "TC TrustCenter Class 3 CA II"
- # Certificate "ComSign CA"
- # Certificate "S-TRUST Universal Root CA"
- # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
- # Certificate "Certplus Root CA G1"
- # Certificate "Certplus Root CA G2"
- # Certificate "OpenTrust Root CA G1"
- # Certificate "OpenTrust Root CA G2"
- # Certificate "OpenTrust Root CA G3"
- Adding:
- # Certificate "GlobalSign Root CA - R6"
- # Certificate "OISTE WISeKey Global Root GC CA"
- # Certificate "GTS Root R1"
- # Certificate "GTS Root R2"
- # Certificate "GTS Root R3"
- # Certificate "GTS Root R4"
- # Certificate "UCA Global G2 Root"
- # Certificate "UCA Extended Validation Root"
- # Certificate "Certigna Root CA"
- # Certificate "emSign Root CA - G1"
- # Certificate "emSign ECC Root CA - G3"
- # Certificate "emSign Root CA - C1"
- # Certificate "emSign ECC Root CA - C3"
- # Certificate "Hongkong Post Root CA 3"
9 9 })i+Bob Relyea <rrelyea@redhat.com> - 2021.2.50-71`- Update to CKBI 2.50 from NSS 3.67
- version number update onlyN(i5+Bob Relyea <rrelyea@redhat.com> - 2021.2.48-71`P@- Update to CKBI 2.48 from NSS 3.66
- Removing:
- # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
- # Certificate "G e'ic+Bob Relyea <rrelyea@redhat.com> - 2020.2.41-79^y- Update to CKBI 2.41 from NSS 3.53.0
- Removing:
- # Certificate "AddTrust Low-Value Services Root"
- # Certificate "AddTrust External Root"
- # Certificate "UTN USERFirst Email Root CA"
- # Certificate "Certplus Class 2 Primary CA"
- # Certificate "Deutsche Telekom Root CA 2"
- # Certificate "Staat der Nederlanden Root CA - G2"
- # Certificate "Swisscom Root CA 2"
- # Certificate "Certinomis - Root CA"
- Adding:
- # Certificate "Entrust Root Certification Authority - G4"
- fix permissions on ghosted files. eoTrust Global CA"
- # Certificate "GeoTrust Universal CA"
- # Certificate "GeoTrust Universal CA 2"
- # Certificate "QuoVadis Root CA"
- # Certificate "Sonera Class 2 Root CA"
- # Certificate "Taiwan GRCA"
- # Certificate "GeoTrust Primary Certification Authority"
- # Certificate "thawte Primary Root CA"
- # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
- # Certificate "GeoTrust Primary Certification Authority - G3"
- # Certificate "thawte Primary Root CA - G2"
- # Certificate "thawte Primary Root CA - G3"
- # Certificate "GeoTrust Primary Certification Authority - G2"
- # Certificate "VeriSign Universal Root Certification Authority"
- # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
- # Certificate "Trustis FPS Root CA"
- # Certificate "EE Certification Centre Root CA"
- # Certificate "LuxTrust Global Root 2"
- # Certificate "Symantec Class 1 Public Primary Certification Autho rity - G4"
- # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
- Adding:
- # Certificate "Microsoft ECC Root Certificate Authority 2017"
- # Certificate "Microsoft RSA Root Certificate Authority 2017"
- # Certificate "e-Szigno Root CA 2017"
- # Certificate "certSIGN Root CA G2"
- # Certificate "Trustwave Global Certification Authority"
- # Certificate "Trustwave Global ECC P256 Certification Authority"
- # Certificate "Trustwave Global ECC P384 Certification Authority"
- # Certificate "NAVER Global Root Certification Authority"
- # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
- # Certificate "GlobalSign Secure Mail Root R45"
- # Certificate "GlobalSign Secure Mail Root E45"
- # Certificate "GlobalSign Root R46"
- # Certificate "GlobalSign Root E46"
- # Certificate "GLOBALTRUST 2020"
- # Certificate "ANF Secure Server Root CA"
- # Certificate "Certum EC-384 CA"
- # Certificate "Certum Trusted Root CA"
t t *i)+Bob Relyea <rrelyea@redhat.com> - 2021.2.50-72a@- Fix expired certificate.
- Removing:
- # Certificate "DST Root CA X3"
}+i+Bob Relyea <rrelyea@redhat.com> - 2022.2.54-71b- Update to CKBI 2.54 from NSS 3.79
- Removing:
- # Certificate "GlobalSign Root CA - R2"
- # Certificate "Cybertrust Global Root"
- # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
- Adding:
- # Certificate "TunTrust Root CA"
- # Certificate "HARICA TLS RSA Root CA 2021"
- # Certificate "HARICA TLS ECC Root CA 2021"
- # Certificate "HARICA Client RSA Root CA 2021"
- # Certificate "HARICA Client ECC Root CA 2021"
- # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
- # Certificate "vTrus ECC Root CA"
- # Certificate "vTrus Root CA"
- # Certificate "ISRG Root X2"
- # Certificate "HiPKI Root CA - G1"
- # Certificate "Telia Root CA v2"
- # Certificate "D-TRUST BR Root CA 1 2020"
- # Certificate "D-TRUST EV Root CA 1 2020" t Root CA G2"
- # Certificate "OpenTrust Root CA G3"
- # Certificate "Certplus Root CA G1"
- # Certificate "Certplus Root CA G2"
- # Certificate "Government Root Certification Authority"
- # Certificate "A-Trust-Qual-02"
- # Certificate "Thailand National Root Certification Authority - G1"
- # Certificate "TrustCor ECA-1"
- # Certificate "TrustCor RootCert CA-2"
- # Certificate "TrustCor RootCert CA-1"
- # Certificate "Certification Authority of WoSign"
- # Certificate "CA 沃通根证书"
- # Certificate "SSC GDL CA Root B"
- # Certificate "SAPO Class 2 Root CA"
- # Certificate "SAPO Class 3 Root CA"
- # Certificate "SAPO Class 4 Root CA"
- # Certificate "CA Disig Root R1"
- # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
- # Certificate "ApplicationCA2 Root"
- # Certificate "GlobalSign"
- # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
- # Certificate "Symantec Class 3 Publi c Primary Certification Authority - G4"
- # Certificate "Halcom Root CA"
- # Certificate "Swisscom Root EV CA 2"
- # Certificate "CFCA GT CA"
- # Certificate "Digidentity L3 Root CA - G2"
- # Certificate "SITHS Root CA v1"
- # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
- # Certificate "Autoridade Certificadora Raiz Brasileira v2"
- # Certificate "Swisscom Root CA 2"
- # Certificate "IGC/A AC racine Etat francais"
- # Certificate "PersonalID Trustworthy RootCA 2011"
- # Certificate "Swedish Government Root Authority v1"
- # Certificate "Swiss Government Root CA II"
- # Certificate "Swiss Government Root CA I"
- # Certificate "Network Solutions Certificate Authority"
- # Certificate "COMODO Certification Authority"
- # Certificate "LuxTrust Global Root"
- # Certificate "AC1 RAIZ MTIN"
- # Certificate "Microsoft Root Certificate Authority 2011"
- # Certificate "CCA India 2011"
- # Certificate "ANCERT C ertificados Notariales V2"
- # Certificate "ANCERT Certificados CGN V2"
- # Certificate "EE Certification Centre Root CA"
- # Certificate "DigiNotar Root CA G2"
- # Certificate "Federal Common Policy CA"
- # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
- # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
- # Certificate "China Internet Network Information Center EV Certificates Root"
- # Certificate "Verizon Global Root CA"
- # Certificate "SwissSign Silver Root CA - G3"
- # Certificate "SwissSign Platinum Root CA - G3"
- # Certificate "SwissSign Gold Root CA - G3"
- # Certificate "Microsec e-Szigno Root CA 2009"
- # Certificate "SITHS CA v3"
- # Certificate "Certinomis - Autorité Racine"
- # Certificate "ANF Server CA"
- # Certificate "Thawte Premium Server CA"
- # Certificate "Thawte Server CA"
- # Certificate "TC TrustCenter Universal CA III"
- # Certificate "KEYNECTIS ROOT CA"
- # Certificate "I.CA - Standard Certification Authority, 09/2009"
- # Certificate "I.CA - Qualified Certification Authority, 09/2009"
- # Certificate "VI Registru Centras RCSC (RootCA)"
- # Certificate "CCA India 2007"
- # Certificate "Autoridade Certificadora Raiz Brasileira v1"
- # Certificate "ipsCA Global CA Root"
- # Certificate "ipsCA Main CA Root"
- # Certificate "Actalis Authentication CA G1"
- # Certificate "A-Trust-Qual-03"
- # Certificate "AddTrust External CA Root"
- # Certificate "ECRaizEstado"
- # Certificate "Configuration"
- # Certificate "FNMT-RCM"
- # Certificate "StartCom Certification Authority"
- # Certificate "TWCA Root Certification Authority"
- # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
- # Certificate "thawte Primary Root CA - G2"
- # Certificate "GeoTrust Primary Certification Authority - G2"
- # Certificate "VeriSign Universal Root Certification Authority"
- # Certificate "thawte Primary Root CA - G3"
- # Certificate "GeoTrust Primary Certification Authority - G3"
- # Certificate "E-ME SSI (RCA)"
- # Certificate "ACEDICOM Root"
- # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
- # Certificate "Correo Uruguayo - Root CA"
- # Certificate "CNNIC ROOT"
- # Certificate "Common Policy"
- # Certificate "Macao Post eSignTrust Root Certification Authority"
- # Certificate "Staat der Nederlanden Root CA - G2"
- # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
- # Certificate "AC Raíz Certicámara S.A."
- # Certificate "Cisco Root CA 2048"
- # Certificate "CA Disig"
- # Certificate "InfoNotary CSP Root"
- # Certificate "UCA Global Root"
- # Certificate "UCA Root"
- # Certificate "DigiNotar Root CA"
- # Certificate "Starfield Services Root Certificate Authority"
- # Certificate "I.CA - Qualified root certificate"
- # Certificate "I.CA - Standard root certificate "
- # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
- # Certificate "Japanese Government"
- # Certificate "AdminCA-CD-T01"
- # Certificate "Admin-Root-CA"
- # Certificate "Izenpe.com"
- # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
- # Certificate "Halcom CA FO"
- # Certificate "Halcom CA PO 2"
- # Certificate "Root CA"
- # Certificate "GPKIRootCA"
- # Certificate "ACNLB"
- # Certificate "state-institutions"
- # Certificate "state-institutions"
- # Certificate "SECOM Trust Systems CO.,LTD."
- # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
- # Certificate "D-TRUST Root Class 2 CA 2007"
- # Certificate "D-TRUST Root Class 3 CA 2007"
- # Certificate "SSC Root CA A"
- # Certificate "SSC Root CA B"
- # Certificate "SSC Root CA C"
- # Certificate "Autoridad de Certificacion de la Abogacia"
- # Certificate "Root CA Generalitat Valenciana"
- # Certificate "VAS La tvijas Pasts SSI(RCA)"
- # Certificate "ANCERT Certificados CGN"
- # Certificate "ANCERT Certificados Notariales"
- # Certificate "ANCERT Corporaciones de Derecho Publico"
- # Certificate "GLOBALTRUST"
- # Certificate "Certipost E-Trust TOP Root CA"
- # Certificate "Certipost E-Trust Primary Qualified CA"
- # Certificate "Certipost E-Trust Primary Normalised CA"
- # Certificate "Cybertrust Global Root"
- # Certificate "GlobalSign"
- # Certificate "IGC/A"
- # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
- # Certificate "TC TrustCenter Universal CA I"
- # Certificate "TC TrustCenter Universal CA II"
- # Certificate "TC TrustCenter Class 2 CA II"
- # Certificate "TC TrustCenter Class 4 CA II"
- # Certificate "Swisscom Root CA 1"
- # Certificate "Microsec e-Szigno Root CA"
- # Certificate "LGPKI"
- # Certificate "AC RAIZ DNIE"
- # Certificate "Common Policy"
- # Certificate "TÜRKTRUST Elektronik Sertifi ka Hizmet Sağlayıcısı"
- # Certificate "A-Trust-nQual-03"
- # Certificate "A-Trust-nQual-03"
- # Certificate "CertRSA01"
- # Certificate "KISA RootCA 1"
- # Certificate "KISA RootCA 3"
- # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
- # Certificate "A-CERT ADVANCED"
- # Certificate "A-Trust-Qual-01"
- # Certificate "A-Trust-nQual-01"
- # Certificate "A-Trust-Qual-02"
- # Certificate "Staat der Nederlanden Root CA"
- # Certificate "Serasa Certificate Authority II"
- # Certificate "TDC Internet"
- # Certificate "America Online Root Certification Authority 2"
- # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
- # Certificate "Government Root Certification Authority"
- # Certificate "RSA Security Inc"
- # Certificate "Public Notary Root"
- # Certificate "GeoTrust Global CA"
- # Certificate "GeoTrust Global CA 2"
- # Certificate "GeoTrust Universal CA"
- # Certificate "GeoTrust Universal CA 2"
- # Certificate "QuoVadis Root Certification Authority"
- # Certificate "Autoridade Certificadora Raiz Brasileira"
- # Certificate "Post.Trust Root CA"
- # Certificate "Microsoft Root Authority"
- # Certificate "Microsoft Root Certificate Authority"
- # Certificate "Microsoft Root Certificate Authority 2010"
- # Certificate "Entrust.net Secure Server Certification Authority"
- # Certificate "UTN-USERFirst-Object"
- # Certificate "BYTE Root Certification Authority 001"
- # Certificate "CISRCA1"
- # Certificate "ePKI Root Certification Authority - G2"
- # Certificate "ePKI EV SSL Certification Authority - G1"
- # Certificate "AC Raíz Certicámara S.A."
- # Certificate "SSL.com EV Root Certification Authority RSA"
- # Certificate "LuxTrust Global Root 2"
- # Certificate "ACA ROOT"
- # Certificate "Security Communication ECC RootCA1"
- # Certificate "Security Communication RootCA3"
- # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
- # Certificate "Network Solutions RSA Certificate Authority"
- # Certificate "Network Solutions ECC Certificate Authority"
- # Certificate "Australian Defence Public Root CA"
- # Certificate "SI-TRUST Root"
- # Certificate "Halcom Root Certificate Authority"
- # Certificate "Application CA G3 Root"
- # Certificate "GLOBALTRUST 2015"
- # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
- # Certificate "emSign Root CA - G2"
- # Certificate "emSign Root CA - C2"
- # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
- # Certificate "DigiCert CS ECC P384 Root G5"
- # Certificate "DigiCert CS RSA4096 Root G5"
- # Certificate "DigiCert RSA4096 Root G5"
- # Certificate "DigiCert ECC P384 Root G5"
- # Certificate "HARICA Code Signing RSA Root CA 2021"
- # Certificate "HARICA Code Signing ECC Root CA 2021"
- # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"
o \-iS+Bob Relyea <rrelyea@redhat.com> - 2022.2.54-73b(- Update to CKBI 2.54 from NSS 3.79a,iY+Bob Relyea <rrelyea@redhat.com> - 2022.2.54-72bV- Update to CKBI 2.54 from NSS 3.79
- Adding:
- # Certificate "CAEDICOM Root"
- # Certificate "I.CA Root CA/RSA"
- # Certificate "MULTICERT Root Certification Authority 01"
- # Certificate "Certification Authority of WoSign G2"
- # Certificate "CA WoSign ECC Root"
- # Certificate "CCA India 2015 SPL"
- # Certificate "Swedish Government Root Authority v3"
- # Certificate "Swedish Government Root Authority v2"
- # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
- # Certificate "OpenTrust Root CA G1"
- # Certificate "OpenTrus
J J 2.i}+Bob Relyea <rrelyea@redhat.com> - 2022.2.54-74bz@- Update to CKBI 2.54 from NSS 3.79
- Removing:
- # Certificate "TrustCor ECA-1"
- # Certificate "TrustCor RootCert CA-2"
- # Certificate "TrustCor RootCert CA-1"
- # Certificate "Network Solutions Certificate Authority"
- # Certificate "COMODO Certification Authority"
- # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
- # Certificate "Microsec e-Szigno Root CA 2009"
- # Certificate "TWCA Root Certification Authority"
- # Certificate "Izenpe.com"
- # Certificate "state-institutions"
- # Certificate "GlobalSign"
- # Certificate "Common Policy"
- # Certificate "A-Trust-nQual-03"
- # Certificate "A-Trust-Qual-02"
- # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
- # Certificate "Government Root Certification Authority"
- # Certificate "AC Raíz Certicámara S.A."
e r+V: e D8
71f20a3e8a0bfe010564d4b6ff77d4b2647ba8383e62e64a557c131359fff889D7
78f9c4332b1d2f19135c616b66d43dfc85165cfc47974524516f8cfde4bb9665D6
bbe893457383d81228467a2e58df9d5f1d18cbfd30d4cd35b2c717dc660133b7D5
744a4dba649fc88cac73b711d32a121916093d5d15e77ef286faaedeb4a66167D4
a0771a63bfd2ad4fc5390775761741924acb2e2a6d6fea5e21306d97e0c18190D3
24f07a4fe7e067974796688aef2936d4d3134d870c6f53a7327a664da0d20893D2
dc1bf06608a791a1bc05682c7a5dd37ff4776553816b5359923260fb02f0c9e2D1
71f02e63578770de15752f8dd63988ac82d645cc84914639679034beaf9f4136D0
cad56706d665a1639372b33e26f5e8b2d45d262ba181a414599688a30272bffdD/
2b5152401ce98d5b3a93e430dbe5819aed3a19a15ef5104214f16d8171c990feD.
aa50cc92809002bfd1b3255057b176376353bd9a36274c4d200209a0ec0861d3D-
b1b4503ca199a88ac8a81a7fa75f6487ef746fd58e4bf8d079e879b4ad3596cbD,
e3a24b7d3f533aea4ed0f3d9388b2f7d72febbb435d58e7be4020cdbc47107e6
9 9 }1i,Bob Relyea <rrelyea@redhat.com> - 2021.2.50-71`- Update to CKBI 2.50 from NSS 3.67
- version number update onlyN0i5,Bob Relyea <rrelyea@redhat.com> - 2021.2.48-71`P@- Update to CKBI 2.48 from NSS 3.66
- Removing:
- # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
- # Certificate "G e/ic,Bob Relyea <rrelyea@redhat.com> - 2020.2.41-79^y- Update to CKBI 2.41 from NSS 3.53.0
- Removing:
- # Certificate "AddTrust Low-Value Services Root"
- # Certificate "AddTrust External Root"
- # Certificate "UTN USERFirst Email Root CA"
- # Certificate "Certplus Class 2 Primary CA"
- # Certificate "Deutsche Telekom Root CA 2"
- # Certificate "Staat der Nederlanden Root CA - G2"
- # Certificate "Swisscom Root CA 2"
- # Certificate "Certinomis - Root CA"
- Adding:
- # Certificate "Entrust Root Certification Authority - G4"
- fix permissions on ghosted files. eoTrust Global CA"
- # Certificate "GeoTrust Universal CA"
- # Certificate "GeoTrust Universal CA 2"
- # Certificate "QuoVadis Root CA"
- # Certificate "Sonera Class 2 Root CA"
- # Certificate "Taiwan GRCA"
- # Certificate "GeoTrust Primary Certification Authority"
- # Certificate "thawte Primary Root CA"
- # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
- # Certificate "GeoTrust Primary Certification Authority - G3"
- # Certificate "thawte Primary Root CA - G2"
- # Certificate "thawte Primary Root CA - G3"
- # Certificate "GeoTrust Primary Certification Authority - G2"
- # Certificate "VeriSign Universal Root Certification Authority"
- # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
- # Certificate "Trustis FPS Root CA"
- # Certificate "EE Certification Centre Root CA"
- # Certificate "LuxTrust Global Root 2"
- # Certificate "Symantec Class 1 Public Primary Certification Autho rity - G4"
- # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
- Adding:
- # Certificate "Microsoft ECC Root Certificate Authority 2017"
- # Certificate "Microsoft RSA Root Certificate Authority 2017"
- # Certificate "e-Szigno Root CA 2017"
- # Certificate "certSIGN Root CA G2"
- # Certificate "Trustwave Global Certification Authority"
- # Certificate "Trustwave Global ECC P256 Certification Authority"
- # Certificate "Trustwave Global ECC P384 Certification Authority"
- # Certificate "NAVER Global Root Certification Authority"
- # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
- # Certificate "GlobalSign Secure Mail Root R45"
- # Certificate "GlobalSign Secure Mail Root E45"
- # Certificate "GlobalSign Root R46"
- # Certificate "GlobalSign Root E46"
- # Certificate "GLOBALTRUST 2020"
- # Certificate "ANF Secure Server Root CA"
- # Certificate "Certum EC-384 CA"
- # Certificate "Certum Trusted Root CA"
t t 2i),Bob Relyea <rrelyea@redhat.com> - 2021.2.50-72a@- Fix expired certificate.
- Removing:
- # Certificate "DST Root CA X3"
}3i,Bob Relyea <rrelyea@redhat.com> - 2022.2.54-71b- Update to CKBI 2.54 from NSS 3.79
- Removing:
- # Certificate "GlobalSign Root CA - R2"
- # Certificate "Cybertrust Global Root"
- # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
- Adding:
- # Certificate "TunTrust Root CA"
- # Certificate "HARICA TLS RSA Root CA 2021"
- # Certificate "HARICA TLS ECC Root CA 2021"
- # Certificate "HARICA Client RSA Root CA 2021"
- # Certificate "HARICA Client ECC Root CA 2021"
- # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
- # Certificate "vTrus ECC Root CA"
- # Certificate "vTrus Root CA"
- # Certificate "ISRG Root X2"
- # Certificate "HiPKI Root CA - G1"
- # Certificate "Telia Root CA v2"
- # Certificate "D-TRUST BR Root CA 1 2020"
- # Certificate "D-TRUST EV Root CA 1 2020" t Root CA G2"
- # Certificate "OpenTrust Root CA G3"
- # Certificate "Certplus Root CA G1"
- # Certificate "Certplus Root CA G2"
- # Certificate "Government Root Certification Authority"
- # Certificate "A-Trust-Qual-02"
- # Certificate "Thailand National Root Certification Authority - G1"
- # Certificate "TrustCor ECA-1"
- # Certificate "TrustCor RootCert CA-2"
- # Certificate "TrustCor RootCert CA-1"
- # Certificate "Certification Authority of WoSign"
- # Certificate "CA 沃通根证书"
- # Certificate "SSC GDL CA Root B"
- # Certificate "SAPO Class 2 Root CA"
- # Certificate "SAPO Class 3 Root CA"
- # Certificate "SAPO Class 4 Root CA"
- # Certificate "CA Disig Root R1"
- # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
- # Certificate "ApplicationCA2 Root"
- # Certificate "GlobalSign"
- # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
- # Certificate "Symantec Class 3 Publi
c Primary Certification Authority - G4"
- # Certificate "Halcom Root CA"
- # Certificate "Swisscom Root EV CA 2"
- # Certificate "CFCA GT CA"
- # Certificate "Digidentity L3 Root CA - G2"
- # Certificate "SITHS Root CA v1"
- # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
- # Certificate "Autoridade Certificadora Raiz Brasileira v2"
- # Certificate "Swisscom Root CA 2"
- # Certificate "IGC/A AC racine Etat francais"
- # Certificate "PersonalID Trustworthy RootCA 2011"
- # Certificate "Swedish Government Root Authority v1"
- # Certificate "Swiss Government Root CA II"
- # Certificate "Swiss Government Root CA I"
- # Certificate "Network Solutions Certificate Authority"
- # Certificate "COMODO Certification Authority"
- # Certificate "LuxTrust Global Root"
- # Certificate "AC1 RAIZ MTIN"
- # Certificate "Microsoft Root Certificate Authority 2011"
- # Certificate "CCA India 2011"
- # Certificate "ANCERT C ertificados Notariales V2"
- # Certificate "ANCERT Certificados CGN V2"
- # Certificate "EE Certification Centre Root CA"
- # Certificate "DigiNotar Root CA G2"
- # Certificate "Federal Common Policy CA"
- # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
- # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
- # Certificate "China Internet Network Information Center EV Certificates Root"
- # Certificate "Verizon Global Root CA"
- # Certificate "SwissSign Silver Root CA - G3"
- # Certificate "SwissSign Platinum Root CA - G3"
- # Certificate "SwissSign Gold Root CA - G3"
- # Certificate "Microsec e-Szigno Root CA 2009"
- # Certificate "SITHS CA v3"
- # Certificate "Certinomis - Autorité Racine"
- # Certificate "ANF Server CA"
- # Certificate "Thawte Premium Server CA"
- # Certificate "Thawte Server CA"
- # Certificate "TC TrustCenter Universal CA III"
- # Certificate "KEYNECTIS ROOT CA"
- # Certificate "I.CA - Standard Certification Authority, 09/2009"
- # Certificate "I.CA - Qualified Certification Authority, 09/2009"
- # Certificate "VI Registru Centras RCSC (RootCA)"
- # Certificate "CCA India 2007"
- # Certificate "Autoridade Certificadora Raiz Brasileira v1"
- # Certificate "ipsCA Global CA Root"
- # Certificate "ipsCA Main CA Root"
- # Certificate "Actalis Authentication CA G1"
- # Certificate "A-Trust-Qual-03"
- # Certificate "AddTrust External CA Root"
- # Certificate "ECRaizEstado"
- # Certificate "Configuration"
- # Certificate "FNMT-RCM"
- # Certificate "StartCom Certification Authority"
- # Certificate "TWCA Root Certification Authority"
- # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
- # Certificate "thawte Primary Root CA - G2"
- # Certificate "GeoTrust Primary Certification Authority - G2"
- # Certificate "VeriSign Universal Root Certification Authority"
- # Certificate "thawte Primary Root CA - G3"
- # Certificate "GeoTrust Primary Certification Authority - G3"
- # Certificate "E-ME SSI (RCA)"
- # Certificate "ACEDICOM Root"
- # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
- # Certificate "Correo Uruguayo - Root CA"
- # Certificate "CNNIC ROOT"
- # Certificate "Common Policy"
- # Certificate "Macao Post eSignTrust Root Certification Authority"
- # Certificate "Staat der Nederlanden Root CA - G2"
- # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
- # Certificate "AC Raíz Certicámara S.A."
- # Certificate "Cisco Root CA 2048"
- # Certificate "CA Disig"
- # Certificate "InfoNotary CSP Root"
- # Certificate "UCA Global Root"
- # Certificate "UCA Root"
- # Certificate "DigiNotar Root CA"
- # Certificate "Starfield Services Root Certificate Authority"
- # Certificate "I.CA - Qualified root certificate"
- # Certificate "I.CA - Standard root certificate "
- # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
- # Certificate "Japanese Government"
- # Certificate "AdminCA-CD-T01"
- # Certificate "Admin-Root-CA"
- # Certificate "Izenpe.com"
- # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
- # Certificate "Halcom CA FO"
- # Certificate "Halcom CA PO 2"
- # Certificate "Root CA"
- # Certificate "GPKIRootCA"
- # Certificate "ACNLB"
- # Certificate "state-institutions"
- # Certificate "state-institutions"
- # Certificate "SECOM Trust Systems CO.,LTD."
- # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
- # Certificate "D-TRUST Root Class 2 CA 2007"
- # Certificate "D-TRUST Root Class 3 CA 2007"
- # Certificate "SSC Root CA A"
- # Certificate "SSC Root CA B"
- # Certificate "SSC Root CA C"
- # Certificate "Autoridad de Certificacion de la Abogacia"
- # Certificate "Root CA Generalitat Valenciana"
- # Certificate "VAS La tvijas Pasts SSI(RCA)"
- # Certificate "ANCERT Certificados CGN"
- # Certificate "ANCERT Certificados Notariales"
- # Certificate "ANCERT Corporaciones de Derecho Publico"
- # Certificate "GLOBALTRUST"
- # Certificate "Certipost E-Trust TOP Root CA"
- # Certificate "Certipost E-Trust Primary Qualified CA"
- # Certificate "Certipost E-Trust Primary Normalised CA"
- # Certificate "Cybertrust Global Root"
- # Certificate "GlobalSign"
- # Certificate "IGC/A"
- # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
- # Certificate "TC TrustCenter Universal CA I"
- # Certificate "TC TrustCenter Universal CA II"
- # Certificate "TC TrustCenter Class 2 CA II"
- # Certificate "TC TrustCenter Class 4 CA II"
- # Certificate "Swisscom Root CA 1"
- # Certificate "Microsec e-Szigno Root CA"
- # Certificate "LGPKI"
- # Certificate "AC RAIZ DNIE"
- # Certificate "Common Policy"
- # Certificate "TÜRKTRUST Elektronik Sertifi ka Hizmet Sağlayıcısı"
- # Certificate "A-Trust-nQual-03"
- # Certificate "A-Trust-nQual-03"
- # Certificate "CertRSA01"
- # Certificate "KISA RootCA 1"
- # Certificate "KISA RootCA 3"
- # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
- # Certificate "A-CERT ADVANCED"
- # Certificate "A-Trust-Qual-01"
- # Certificate "A-Trust-nQual-01"
- # Certificate "A-Trust-Qual-02"
- # Certificate "Staat der Nederlanden Root CA"
- # Certificate "Serasa Certificate Authority II"
- # Certificate "TDC Internet"
- # Certificate "America Online Root Certification Authority 2"
- # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
- # Certificate "Government Root Certification Authority"
- # Certificate "RSA Security Inc"
- # Certificate "Public Notary Root"
- # Certificate "GeoTrust Global CA"
- # Certificate "GeoTrust Global CA 2"
- # Certificate "GeoTrust Universal CA"
- # Certificate "GeoTrust Universal CA 2"
- # Certificate "QuoVadis Root Certification Authority"
- # Certificate "Autoridade Certificadora Raiz Brasileira"
- # Certificate "Post.Trust Root CA"
- # Certificate "Microsoft Root Authority"
- # Certificate "Microsoft Root Certificate Authority"
- # Certificate "Microsoft Root Certificate Authority 2010"
- # Certificate "Entrust.net Secure Server Certification Authority"
- # Certificate "UTN-USERFirst-Object"
- # Certificate "BYTE Root Certification Authority 001"
- # Certificate "CISRCA1"
- # Certificate "ePKI Root Certification Authority - G2"
- # Certificate "ePKI EV SSL Certification Authority - G1"
- # Certificate "AC Raíz Certicámara S.A."
- # Certificate "SSL.com EV Root Certification Authority RSA"
- # Certificate "LuxTrust Global Root 2"
- # Certificate "ACA ROOT"
- # Certificate "Security Communication ECC RootCA1"
- # Certificate "Security Communication RootCA3"
- # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
- # Certificate "Network Solutions RSA Certificate Authority"
- # Certificate "Network Solutions ECC Certificate Authority"
- # Certificate "Australian Defence Public Root CA"
- # Certificate "SI-TRUST Root"
- # Certificate "Halcom Root Certificate Authority"
- # Certificate "Application CA G3 Root"
- # Certificate "GLOBALTRUST 2015"
- # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
- # Certificate "emSign Root CA - G2"
- # Certificate "emSign Root CA - C2"
- # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
- # Certificate "DigiCert CS ECC P384 Root G5"
- # Certificate "DigiCert CS RSA4096 Root G5"
- # Certificate "DigiCert RSA4096 Root G5"
- # Certificate "DigiCert ECC P384 Root G5"
- # Certificate "HARICA Code Signing RSA Root CA 2021"
- # Certificate "HARICA Code Signing ECC Root CA 2021"
- # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"
o \5iS,Bob Relyea <rrelyea@redhat.com> - 2022.2.54-73b(- Update to CKBI 2.54 from NSS 3.79a4iY,Bob Relyea <rrelyea@redhat.com> - 2022.2.54-72bV- Update to CKBI 2.54 from NSS 3.79
- Adding:
- # Certificate "CAEDICOM Root"
- # Certificate "I.CA Root CA/RSA"
- # Certificate "MULTICERT Root Certification Authority 01"
- # Certificate "Certification Authority of WoSign G2"
- # Certificate "CA WoSign ECC Root"
- # Certificate "CCA India 2015 SPL"
- # Certificate "Swedish Government Root Authority v3"
- # Certificate "Swedish Government Root Authority v2"
- # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
- # Certificate "OpenTrust Root CA G1"
- # Certificate "OpenTrus
J J 26i},Bob Relyea <rrelyea@redhat.com> - 2022.2.54-74bz@- Update to CKBI 2.54 from NSS 3.79
- Removing:
- # Certificate "TrustCor ECA-1"
- # Certificate "TrustCor RootCert CA-2"
- # Certificate "TrustCor RootCert CA-1"
- # Certificate "Network Solutions Certificate Authority"
- # Certificate "COMODO Certification Authority"
- # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
- # Certificate "Microsec e-Szigno Root CA 2009"
- # Certificate "TWCA Root Certification Authority"
- # Certificate "Izenpe.com"
- # Certificate "state-institutions"
- # Certificate "GlobalSign"
- # Certificate "Common Policy"
- # Certificate "A-Trust-nQual-03"
- # Certificate "A-Trust-Qual-02"
- # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
- # Certificate "Government Root Certification Authority"
- # Certificate "AC Raíz Certicámara S.A." "
- # Certificate "GPKIRootCA"
- # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
- # Certificate "TC TrustCenter Universal CA I"
- # Certificate "TC TrustCenter Universal CA II"
- # Certificate "TC TrustCenter Class 2 CA II"
- # Certificate "TC TrustCenter Class 4 CA II"
- # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
- # Certificate "CertRSA01"
- # Certificate "KISA RootCA 3"
- # Certificate "A-CERT ADVANCED"
- # Certificate "A-Trust-Qual-01"
- # Certificate "A-Trust-nQual-01"
- # Certificate "Serasa Certificate Authority II"
- # Certificate "TDC Internet"
- # Certificate "America Online Root Certification Authority 2"
- # Certificate "RSA Security Inc"
- # Certificate "Public Notary Root"
- # Certificate "Autoridade Certificadora Raiz Brasileira"
- # Certificate "Post.Trust Root CA"
- # Certificate "Entrust.net Secure Server Certification Authority"
- # Certificate "ePKI EV SSL Certification Authority - G1"
- Adding:
- # Certificate "DigiCert TLS ECC P384 Root G5"
- # Certificate "DigiCert TLS RSA4096 Root G5"
- # Certificate "DigiCert SMIME ECC P384 Root G5"
- # Certificate "DigiCert SMIME RSA4096 Root G5"
- # Certificate "Certainly Root R1"
- # Certificate "Certainly Root E1"
- # Certificate "E-Tugra Global Root CA RSA v3"
- # Certificate "E-Tugra Global Root CA ECC v3"
- # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
- # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
- # Certificate "BJCA Global Root CA1"
- # Certificate "BJCA Global Root CA2"
- # Certificate "Symantec Enterprise Mobile Root for Microsoft"
- # Certificate "A-Trust-Root-05"
- # Certificate "ADOCA02"
- # Certificate "StartCom Certification Authority G2"
- # Certificate "ATHEX Root CA"
- # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
- # Certificate "GeoTrust Primary Certification Authority"
- # Certificate "thawte Primary Root CA"
- # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
- # Certificate "America Online Root Certification Authority 1"
- # Certificate "Juur-SK"
- # Certificate "ComSign CA"
- # Certificate "ComSign Secured CA"
- # Certificate "ComSign Advanced Security CA"
- # Certificate "Global Chambersign Root"
- # Certificate "Sonera Class2 CA"
- # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
- # Certificate "VeriSign, Inc."
- # Certificate "GTE CyberTrust Global Root"
- # Certificate "Equifax Secure Global eBusiness CA-1"
- # Certificate "Equifax"
- # Certificate "Class 1 Primary CA"
- # Certificate "Swiss Government Root CA III"
- # Certificate "Application CA G4 Root"
- # Certificate "SSC GDL CA Root A"
- # Certificate "GlobalSign Code Signing Root E45"
- # Certificate "GlobalSign Code Signing Root R45"
- # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"
7,Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-71d- Update to CKBI 2.60_v7.0.306 from NSS 3.91
- Removing:
- # Certificate "Camerfirma Global Chambersign Root"
- # Certificate "Staat der Nederlanden EV Root CA"
- # Certificate "OpenTrust Root CA G1"
- # Certificate "Swedish Government Root Authority v1"
- # Certificate "DigiNotar Root CA G2"
- # Certificate "Federal Common Policy CA"
- # Certificate "TC TrustCenter Universal CA III"
- # Certificate "CCA India 2007"
- # Certificate "ipsCA Global CA Root"
- # Certificate "ipsCA Main CA Root"
- # Certificate "Macao Post eSignTrust Root Certification Authority"
- # Certificate "InfoNotary CSP Root"
- # Certificate "DigiNotar Root CA"
- # Certificate "Root CA
"[] P>UO-Pablo Greco <pablo@fliagreco.com.ar>[- Update to 7.6
- Fix vault reposp=]-Anssi Johansson <avij@centosproject.org>[ @- Point AltArch URLs to mirrorlist.c.o instead of mirror.c.o~<U)-Pablo Greco <pablo@fliagreco.com.ar>[l,- Enable ostree-remount in presets
- Include power9 as a separate ppc64le archz;U!-Pablo Greco <pablo@fliagreco.com.ar>[dC- Unified tarball for all arches, so it can be built from the same src.rpmz:U!-Pablo Greco <pablo@fliagreco.com.ar>[bA- Sync version and fixes with centos-release
- Unified spec for all archesG9OC-Johnny Hughes <johnny@centos.org>[b@- Post Trans for contentdirZ83,Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-72di- hand merge the two 'GlobalSign ECC Root CA R4' certs together and the two 'AC RAIZ FNMT-RCM' certs together to keep p11kit from getting confused.
o 4 o GDOC.Johnny Hughes <johnny@centos.org>[b@- Post Trans for contentdirxCU .Pablo Greco <pablo@fliagreco.com.ar>ZK@- armhfp: Require extlinux-bootloader now that update-boot was obsoletedPBYK-Pablo Greco <pgreco@centosproject.org>_@- Fix reference to 7.8 upstream@AY+-Pablo Greco <pgreco@centosproject.org>_@- Update to 7.9>@Y%-Pablo Greco <pgreco@centosproject.org>^- Add rootfs-expand to aarch64
- Create generic kvariant in aarch64 if it doesn't exist (for new kernel repos)
- Own kvariant var in armhfp and aarch64
- Backport move of /etc/os-release to /usr/lib/os-release (ngompa)
- Spec file cleanup (carlwgeorge)
- Update to 7.8p?Y -Pablo Greco <pgreco@centosproject.org>]m@- Own yum vars
- Generate yum vars at build time
- Remove dist_suffix
- Fix autorelabel preset
- Fix tuned profile in system-release-cpe
- Set aarch64 tuned profile to server
- Update to 7.7
pJY .Pablo Greco <pgreco@centosproject.org>]m@- Own yum vars
- Generate yum vars at build time
- Remove dist_suffix
- Fix autorelabel preset
- Fix tuned profile in system-release-cpe
- Set aarch64 tuned profile to server
- Update to 7.7PIUO.Pablo Greco <pablo@fliagreco.com.ar>[- Update to 7.6
- Fix vault repospH].Anssi Johansson <avij@centosproject.org>[ @- Point AltArch URLs to mirrorlist.c.o instead of mirror.c.o~GU).Pablo Greco <pablo@fliagreco.com.ar>[l,- Enable ostree-remount in presets
- Include power9 as a separate ppc64le archzFU!.Pablo Greco <pablo@fliagreco.com.ar>[dC- Unified tarball for all arches, so it can be built from the same src.rpmzEU!.Pablo Greco <pablo@fliagreco.com.ar>[bA- Sync version and fixes with centos-release
- Unified spec for all arches
\l $Ok_/Rob Crittenden <rcritten@redhat.com> - 0.78.4-8[MA- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf
Nk1/Rob Crittenden <rcritten@redhat.com> - 0.78.4-7[M@- Pass _PROXY, _proxy, LANG and LC_* environment variables to
helpers (#1596161)\MkQ/Rob Crittenden <rcritten@redhat.com> - 0.78.4-6[
@- Remove reference to unused patch_LOs.Johnny Hughes <johnny@centos.org>dcp@- Update for 7.9.2009 and EOL
- EOL is 30 June 2024>KY%.Pablo Greco <pgreco@centosproject.org>^- Add rootfs-expand to aarch64
- Create generic kvariant in aarch64 if it doesn't exist (for new kernel repos)
- Own kvariant var in armhfp and aarch64
- Backport move of /etc/os-release to /usr/lib/os-release (ngompa)
- Spec file cleanup (carlwgeorge)
- Update to 7.8
>
{Tm /Rob Crittenden <rcritten@redhat.com> - 0.78.4-13^@- Ensure that files read in have a trailing new-line (#1814976)xSm/Rob Crittenden <rcritten@redhat.com> - 0.78.4-12]A- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
man page (#1651368)
- SCEP: Don't set message=<ca ident> with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)Rm9/Rob Crittenden <rcritten@redhat.com> - 0.78.4-11\b@- Increase SCEP spec compliance, set more secure default cipher and hash.
(#1533216)QmC/Rob Crittenden <rcritten@redhat.com> - 0.78.4-10[@- Backport patches to add support for the MS Certificate Template V2
extension (#1622184)>Pk/Rob Crittenden <rcritten@redhat.com> - 0.78.4-9[qr- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
variables to helpers. The root cause was a bug in IPA (#1596161)
W x\ W ZmC0Rob Crittenden <rcritten@redhat.com> - 0.78.4-10[@- Backport patches to add support for the MS Certificate Template V2
extension (#1622184)>Yk0Rob Crittenden <rcritten@redhat.com> - 0.78.4-9[qr- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
variables to helpers. The root cause was a bug in IPA (#1596161)$Xk_0Rob Crittenden <rcritten@redhat.com> - 0.78.4-8[MA- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf
Wk10Rob Crittenden <rcritten@redhat.com> - 0.78.4-7[M@- Pass _PROXY, _proxy, LANG and LC_* environment variables to
helpers (#1596161)Vm#/Rob Crittenden <rcritten@redhat.com> - 0.78.4-15`@- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)Um /Rob Crittenden <rcritten@redhat.com> - 0.78.4-14^Ǿ- Include &message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)
] jp ] _m#0Rob Crittenden <rcritten@redhat.com> - 0.78.4-15`@- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)^m 0Rob Crittenden <rcritten@redhat.com> - 0.78.4-14^Ǿ- Include &message=CA-IDENT with GetCACaps/GetCACert requests (#1839181){]m 0Rob Crittenden <rcritten@redhat.com> - 0.78.4-13^@- Ensure that files read in have a trailing new-line (#1814976)x\m0Rob Crittenden <rcritten@redhat.com> - 0.78.4-12]A- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
man page (#1651368)
- SCEP: Don't set message=<ca ident> with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)[m90Rob Crittenden <rcritten@redhat.com> - 0.78.4-11\b@- Increase SCEP spec compliance, set more secure default cipher and hash.
(#1533216)
} dm91Rob Crittenden <rcritten@redhat.com> - 0.78.4-11\b@- Increase SCEP spec compliance, set more secure default cipher and hash.
(#1533216)cmC1Rob Crittenden <rcritten@redhat.com> - 0.78.4-10[@- Backport patches to add support for the MS Certificate Template V2
extension (#1622184)>bk1Rob Crittenden <rcritten@redhat.com> - 0.78.4-9[qr- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
variables to helpers. The root cause was a bug in IPA (#1596161)$ak_1Rob Crittenden <rcritten@redhat.com> - 0.78.4-8[M@- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf{`m 0Rob Crittenden <rcritten@redhat.com> - 0.78.4-16aHw- Fix file descriptor leak when executing CA helpers (#1992439)
u ~ u {im 1Rob Crittenden <rcritten@redhat.com> - 0.78.4-16aHw- Fix file descriptor leak when executing CA helpers (#1992439)hm#1Rob Crittenden <rcritten@redhat.com> - 0.78.4-15`@- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)gm 1Rob Crittenden <rcritten@redhat.com> - 0.78.4-14^Ǿ- Include &message=CA-IDENT with GetCACaps/GetCACert requests (#1839181){fm 1Rob Crittenden <rcritten@redhat.com> - 0.78.4-13^@- Ensure that files read in have a trailing new-line (#1814976)xem1Rob Crittenden <rcritten@redhat.com> - 0.78.4-12]A- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
man page (#1651368)
- SCEP: Don't set message=<ca ident> with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)
X XWh X znu2Miroslav Rezanina <mrezanin@redhat.com> - 19.4-2.el7^s^- ci-Removing-cloud-user-from-wheel.pat % muG2Miroslav Rezanina <mrezanin@redhat.com> - 19.4-1.el7^p- Rebase to 19.4 [bz#1803094]
- Resolves: bz#1803094
([RHEL-7.9] cloud-init rebase to 19.4)kluc2Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7]@- ci-util-json.dumps-on-python-2.7-will-handle-UnicodeDec.patch [bz#1744526]
- Resolves: bz#1744526
([cloud-init][OpenStack] cloud-init can't persist instance-data.json)}ku2Miroslav Rezanina <mrezanin@redhat.com> - 18.5-5.el7]w@- ci-Fix-for-network-configuration-not-persisting-after-r.patch [bz#1593010]
- Resolves: bz#1593010
([cloud-init][RHVM]cloud-init network configuration does not persist reboot [RHEL 7.8])$jm]1Rob Crittenden <rcritten@redhat.com> - 0.78.4-17an@- certmonger creates CSRs with invalid DER syntax for X509v3 extensions
with critical=FALSE (#2015511) ch [bz#1549638]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
- ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
- ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
- ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
- Resolves: bz#1549638
([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
- Resolves: bz#1574338
(CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
- Resolves: bz#1748015
([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1812170
(CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
- Resolves: bz#1812173
(CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])
+ + @qu
2Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el7^@- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)pu2Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el7^@- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)ou2Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el7^@- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)
q Yq dsuU2Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7^- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)#ruS2Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el7^>@- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)
W zvu3Miroslav Rezanina <mrezanin@redhat.com> - 19.4-2.el7^s^- ci-Removing-cloud-user-from-wheel.pat ) uuG3Miroslav Rezanina <mrezanin@redhat.com> - 19.4-1.el7^p- Rebase to 19.4 [bz#1803094]
- Resolves: bz#1803094
([RHEL-7.9] cloud-init rebase to 19.4)ti!2Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.2_- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z]) ch [bz#1549638]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
- ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
- ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
- ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
- Resolves: bz#1549638
([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
- Resolves: bz#1574338
(CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
- Resolves: bz#1748015
([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1812170
(CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
- Resolves: bz#1812173
(CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])
+ + @yu
3Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el7^@- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)xu3Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el7^@- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)wu3Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el7^@- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)
q Yq d{uU3Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7^- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)#zuS3Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el7^>@- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)
#}i_3Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])|i!3Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.2_- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])
Y ja Y u4Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el7^@- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init) u4Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el7^@- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)zu4Miroslav Rezanina <mrezanin@redhat.com> - 19.4-2.el7^s^- ci-Removing-cloud-user-from-wheel.pat .#~i_3Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z]) ch [bz#1549638]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
- ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
- ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
- ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
- Resolves: bz#1549638
([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
- Resolves: bz#1574338
(CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
- Resolves: bz#1748015
([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1812170
(CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
- Resolves: bz#1812173
(CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])
< #uS4Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el7^>@- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)@u
4Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el7^@- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)
i!4Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.2_- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])duU4Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7^- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)
Fi%4Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.4`+- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
- Resolves: bz#1900807
(Update existing user password RHEL7x)#i_4Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])#i_4Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])
+ + @ u
5Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el7^@- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)
u5Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el7^@- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init) u5Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el7^@- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)
q Yq d
uU5Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7^- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)# uS5Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el7^>@- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)
#i_5Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])i!5Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.2_- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])
u6Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el7^@- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)n}a5Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7_9.5` @- ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1897616]
- Resolves: bz#1897616
([rhel-7]cloud-final.service fails if NetworkManager not installed.)Fi%5Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.4`+- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
- Resolves: bz#1900807
(Update existing user password RHEL7x)#i_5Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])
< #uS6Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el7^>@- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)@u
6Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el7^@- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)
i!6Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.2_- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])duU6Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7^- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)
Fi%6Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.4`+- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
- Resolves: bz#1900807
(Update existing user password RHEL7x)#i_6Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])#i_6Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])
{ { sI7Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.r su7Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.m Y7Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4. i+6Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.6a- ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2003231]
- Resolves: bz#2003231
(anything above 19.2 of cloud init it fails to assign default route and connect to the meta data service)n}a6Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7_9.5` @- ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1897616]
- Resolves: bz#1897616
([rhel-7]cloud-final.service fails if NetworkManager not installed.)
st[ Q% 7Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.$ 7Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
#s#7Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c"sW7Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.!s97Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. s!7Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.
B r\6 B
,s#8Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c+sW8Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.*s98Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. )s!8Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. (sI8Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.r'su8Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.
&7Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.
m u m 2s!9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. 1sI9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.t0g8Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
/8Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q. 8Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.- 8Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
e r+V: e DE
298ea0c2efac5573e322e25503e2c30d52bb589fa8ef1cc0df2ba4f2bbbfd3c3DD
c5fc7f37feaeaf11068007f084d0a7046d1674006226de685b890730ee95e3c5DC
5f7f4b24a0e71345d5407d27b3ec2dba93f549f3873d99c73c1a6b6d5527120bDB
69d4fb9319ca5a9e4cae9e47996216cc1f227003389290e9e68c05911af73d15DA
f3f69f58e04b244b740beae57319f782363f8a8bfaacea37bca6ed2cb7d1cd2eD@
1cb1df73a2743fe17a9ccf9a82ba1339ff309d7912d173c10e2a3e8ef400fcffD?
2009ebe5d0c47032c5784190a92c5dfb2abdff45270eabce812d7641915b2fb6D>
88829e504b63e6f7b3b0f74d257ab87d6d2ac4c04e4220a90e33576fdc11d02fD=
6a71d3f89673ae6444441f6f1e25eb47a4347ba95f13345e2fcfcdfda313670bD<
8c4048ad0a30efd78b835e73ee590a52730bf658e4ee011dd963e908a4dbad81D;
6489c51c51e8202231b1a3e24f6328463bbd952da0cbdede7cfd828112422e18D:
c7607cfa2a4a5dcba948ec0c8b744a7f05d5113920dcbe14a16acdc6a14166b7D9
7fe1420aaf46d2b3e38efd53645a2803c75ef85aa2e51400cf062745f1a1e9ca
gs
89Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q7 9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.6 9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
5s#9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c4sW9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.3s99Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.
W Fu W
?e7:Kalev Lember <klember@redhat.com> - 3.28.1-4[s- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880 >m':Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-3[(@- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109m=qm:Christian Kellner <ckellner@redhat.com> - 3.28.1-2[ d@- Include thunderbolt panel
- Resolves: #1567179^<e[:Kalev Lember <klember@redhat.com> - 3.28.1-1Zn- Update to 3.28.1
- Resolves: #1567179y;m:Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-9Z- Add support for Wacom Pro Pen 3D styli
Resolves: #1557256C:9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.t9g9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
> y > mGqm;Christian Kellner <ckellner@redhat.com> - 3.28.1-2[ d@- Include thunderbolt panel
- Resolves: #1567179^Fe[;Kalev Lember <klember@redhat.com> - 3.28.1-1Zn- Update to 3.28.1
- Resolves: #1567179yEm;Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-9Z- Add support for Wacom Pro Pen 3D styli
Resolves: #1557256rDyo:Michael Catanzaro <mcatanzaro@redhat.com> - 3.28.1-8.1b@- Remove timezone boundaries
Resolves: #2098262vCa
:Marek Kasik <mkasik@redhat.com> - 3.28.1-8`KW- Enable Printers panel in all environments
- Resolves: #1559431zBm :Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7^ - Categorize Infiniband devices correctly
Resolves: #1630154Am;:Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]L- Calculate better extents for the configured displays arrangement
Resolves: #1591643p@mw:Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]J@- Fix crash in thunderbolt panel
Resolves: #1672289
m so[ m rNyo;Michael Catanzaro <mcatanzaro@redhat.com> - 3.28.1-8.1b@- Remove timezone boundaries
Resolves: #2098262vMa
;Marek Kasik <mkasik@redhat.com> - 3.28.1-8`KW- Enable Printers panel in all environments
- Resolves: #1559431zLm ;Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7^ - Categorize Infiniband devices correctly
Resolves: #1630154Km;;Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]L- Calculate better extents for the configured displays arrangement
Resolves: #1591643pJmw;Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]J@- Fix crash in thunderbolt panel
Resolves: #1672289
Ie7;Kalev Lember <klember@redhat.com> - 3.28.1-4[s- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880 Hm';Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-3[(@- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109
Y 7Z] Y pUmw<Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]J@- Fix crash in thunderbolt panel
Resolves: #1672289
Te7<Kalev Lember <klember@redhat.com> - 3.28.1-4[s- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880 Sm'<Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-3[(@- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109mRqm<Christian Kellner <ckellner@redhat.com> - 3.28.1-2[ d@- Include thunderbolt panel
- Resolves: #1567179^Qe[<Kalev Lember <klember@redhat.com> - 3.28.1-1Zn- Update to 3.28.1
- Resolves: #1567179yPm<Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-9Z- Add support for Wacom Pro Pen 3D styli
Resolves: #1557256EOi#<Bastien Nocera <bnocera@redhat.com> - 3.26.2-8Z
+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713
] is. ] m\qm=Christian Kellner <ckellner@redhat.com> - 3.28.1-2[ d@- Include thunderbolt panel
- Resolves: #1567179^[e[=Kalev Lember <klember@redhat.com> - 3.28.1-1Zn- Update to 3.28.1
- Resolves: #1567179yZm=Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-9Z- Add support for Wacom Pro Pen 3D styli
Resolves: #1557256EYi#=Bastien Nocera <bnocera@redhat.com> - 3.26.2-8Z
+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713vXa
<Marek Kasik <mkasik@redhat.com> - 3.28.1-8`KW- Enable Printers panel in all environments
- Resolves: #1559431zWm <Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7^ - Categorize Infiniband devices correctly
Resolves: #1630154Vm;<Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]L- Calculate better extents for the configured displays arrangement
Resolves: #1591643
f so[ f ycm>Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-9Z- Add support for Wacom Pro Pen 3D styli
Resolves: #1557256vba
=Marek Kasik <mkasik@redhat.com> - 3.28.1-8`KW- Enable Printers panel in all environments
- Resolves: #1559431zam =Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7^ - Categorize Infiniband devices correctly
Resolves: #1630154`m;=Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]L- Calculate better extents for the configured displays arrangement
Resolves: #1591643p_mw=Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]J@- Fix crash in thunderbolt panel
Resolves: #1672289
^e7=Kalev Lember <klember@redhat.com> - 3.28.1-4[s- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880 ]m'=Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-3[(@- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109
/ zjm >Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7^ - Categorize Infiniband devices correctly
Resolves: #1630154im;>Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]L- Calculate better extents for the configured displays arrangement
Resolves: #1591643phmw>Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]J@- Fix crash in thunderbolt panel
Resolves: #1672289
ge7>Kalev Lember <klember@redhat.com> - 3.28.1-4[s- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880 fm'>Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-3[(@- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109meqm>Christian Kellner <ckellner@redhat.com> - 3.28.1-2[ d@- Include thunderbolt panel
- Resolves: #1567179^de[>Kalev Lember <klember@redhat.com> - 3.28.1-1Zn- Update to 3.28.1
- Resolves: #1567179
o Il o qm'?Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-3[(@- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109mpqm?Christian Kellner <ckellner@redhat.com> - 3.28.1-2[ d@- Include thunderbolt panel
- Resolves: #1567179^oe[?Kalev Lember <klember@redhat.com> - 3.28.1-1Zn- Update to 3.28.1
- Resolves: #1567179ynm?Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-9Z- Add support for Wacom Pro Pen 3D styli
Resolves: #1557256Emi#?Bastien Nocera <bnocera@redhat.com> - 3.26.2-8Z
+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713rlyo>Michael Catanzaro <mcatanzaro@redhat.com> - 3.28.1-8.1b@- Remove timezone boundaries
Resolves: #2098262vka
>Marek Kasik <mkasik@redhat.com> - 3.28.1-8`KW- Enable Printers panel in all environments
- Resolves: #1559431
L oeo L xxY@Jiri Vanek <jvanek@redhat.com> - 1.2-1W- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430$wYq@Jiri Vanek <jvanek@redhat.com> - 1.1-5W- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430vva
?Marek Kasik <mkasik@redhat.com> - 3.28.1-8`KW- Enable Printers panel in all environments
- Resolves: #1559431zum ?Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7^ - Categorize Infiniband devices correctly
Resolves: #1630154tm;?Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]L- Calculate better extents for the configured displays arrangement
Resolves: #1591643psmw?Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]J@- Fix crash in thunderbolt panel
Resolves: #1672289
re7?Kalev Lember <klember@redhat.com> - 3.28.1-4[s- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880
U qJn U ~Y/@Jiri Vanek <jvanek@redhat.com> - 3.3-3Zm- fixes issue when java.security for openjdk7 was erased
- Resolves: rhbz#1571854}YE@Jiri Vanek <jvanek@redhat.com> - 3.3-2YZA- added another subdirs for policies files
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668t|Y@Jiri Vanek <jvanek@redhat.com> - 3.3-1YZ@- updated to 3.3
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668b{Yo@Jiri Vanek <jvanek@redhat.com> - 2.2-3YG- updated to latest head
- Resolves: rhbz#1427463#zYo@Jiri Vanek <jvanek@redhat.com> - 2.2-1Y?- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh
- copy_jdk_configs.lua aligned to it
- Resolves: rhbz#1427463 yY?@Jiri Vanek <jvanek@redhat.com> - 1.3-1X@- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719
1
1 gaoAOndrej Vasik <ovasik@redhat.com> - 8.22-18Wv[@- fix xfs build failure in chrooted environment (#1263341)
- update filesystem lists for stat and tail from latest upstream
(#1327881, #1280357)
- disable id/setgid.sh test(missing chroot feature), fix
cp-a-selinux test (#1266500,#1266501)
- colorls.sh - change detection of interactive shell for ksh
compatibility (#1321648)
- fix date --date crash with empty or invalid TZ envvar (#1325786)
- df -l: do not hang on a dead autofs mount point (#1309247)
- sort -h: fix functionality of human readable numeric sort for other
than first field (#1328360)naAOndrej Vasik <ovasik@redhat.com> - 8.22-16VU- cp: prevent potential sparse file corruption (#1284906)~ [#@Jiri Vanek <jvanek@redhat.com> - 3.3-11[R@- Fixing deletation ofemtpy dirs via rogue symlink
- Resolves: rhbz#2100617o[@Jiri Vanek <jvanek@redhat.com> - 3.3-10Z@- added javaws.policy and blacklist
- Resolves: rhbz#1571854
>_ AKamil Dudka <kdudka@redhat.com> - 8.22-23[#@- update description of the -a/--all option in df.1 man page (#1553212)
- sort -M: fix memory leak when using multibyte locale (#1540059)h_uAKamil Dudka <kdudka@redhat.com> - 8.22-22Zhu@- mv -n: do not overwrite the destination (#1526265)r_AKamil Dudka <kdudka@redhat.com> - 8.22-21Z%8- timeout: revert the last fix for a possible race (#1439465)_%AKamil Dudka <kdudka@redhat.com> - 8.22-20Z@- df: do not stat file systems that do not satisfy the -t/-x args (#1511947)p_AKamil Dudka <kdudka@redhat.com> - 8.22-19Yé- timeout: fix race possibly terminating wrong process (#1439465)
- ls: allow interruption when reading slow directories (#1421802)
- fold: preserve new-lines in mutlibyte text (#1418505)
! d
o]AKamil Dudka <kdudka@redhat.com> - 8.22-24.el7_9.2_- sync: fix open fallback bug (#1850682)r oyAKamil Dudka <kdudka@redhat.com> - 8.22-24.el7_9.1^- sync: support syncing specified arguments (#1850682)f_oAKamil Dudka <kdudka@redhat.com> - 8.22-24\- doc: improve description of the --kibibytes option of ls (#1527391)
- doc: fix typo in date example (#1620624)
- stat,tail: sync the list of file systems with coreutils-8.31 (#1659530)
- df: avoid stat() for dummy file systems with -l (#1668137)
- df: prioritize mounts nearer the device root (#1042840)
S \ S
_YBJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120
- Rebase to Corosync 2.4.5g _sBJan Friesse <jfriesse@redhat.com> 2.4.3-6\|- Resolves: rhbz#1542703
- Add spausedd subpackage _cBJan Friesse <jfriesse@redhat.com> 2.4.3-5\|- Resolves: rhbz#1376819
- Resolves: rhbz#1634710
- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)
&s jcuBJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J@- Related: rhbz#1737884
- Enhance spausedd makefile/c}BJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik- Resolves: rhbz#1737884
- Resolves: rhbz#1737887
- Do not set exec permission for service file
- Fix CFLAGS definitionV_OBJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492
- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)
v v j_wBJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ- Resolves: rhbz#1835885
- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)_SBJan Friesse <jfriesse@redhat.com> 2.4.5-5^y@- Resolves: rhbz#1679792
- Resolves: rhbz#1780134
- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)
a #D; a V_OCJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492
- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)_YCJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120
- Rebase to Corosync 2.4.5g_sCJan Friesse <jfriesse@redhat.com> 2.4.3-6\|- Resolves: rhbz#1542703
- Add spausedd subpackage[cUBJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`- Resolves: rhbz#1896311
- Resolves: rhbz#1897087
- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)Y_UBJan Friesse <jfriesse@redhat.com> 2.4.5-7^3- Related: rhbz#1835885
- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885) of flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| O T Z !_ "d #i $n &q 's (v *y +{ ,} - / 0 1 2 3
4 5 6 7 8 9 :% ;, <2 >8 ?? @G AN BU C\ Dc Ej Fq Gx H~ I J K
L
M N O Q R S! T$ U& V+ W. X2 Z5 [8 \: ]? ^B _F `I aL bN cP dS eV fX g] h` id ji kk ln mq nt ov px q{ r~ s t u v w x y z {# |) }/ ~5 : ? E J P U [ a f k q u y ~
M _SCJan Friesse <jfriesse@redhat.com> 2.4.5-5^y@- Resolves: rhbz#1679792
- Resolves: rhbz#1780134
- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)jcuCJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J@- Related: rhbz#1737884
- Enhance spausedd makefile/c}CJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik- Resolves: rhbz#1737884
- Resolves: rhbz#1737887
- Do not set exec permission for service file
- Fix CFLAGS definition
> > cGCJan Friesse <jfriesse@redhat.com> 2.4.5-7.2av@- Resolves: rhbz#2001969
- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)[ cUCJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`- Resolves: rhbz#1896311
- Resolves: rhbz#1897087
- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)Y _UCJan Friesse <jfriesse@redhat.com> 2.4.5-7^3- Related: rhbz#1835885
- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)j_wCJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ- Resolves: rhbz#1835885
- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)
S \ S !_YDJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120
- Rebase to Corosync 2.4.5g _sDJan Friesse <jfriesse@redhat.com> 2.4.3-6\|- Resolves: rhbz#1542703
- Add spausedd subpackage _cDJan Friesse <jfriesse@redhat.com> 2.4.3-5\|- Resolves: rhbz#1376819
- Resolves: rhbz#1634710
- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)
&s j$cuDJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J@- Related: rhbz#1737884
- Enhance spausedd makefile/#c}DJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik- Resolves: rhbz#1737884
- Resolves: rhbz#1737887
- Do not set exec permission for service file
- Fix CFLAGS definitionV"_ODJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492
- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)
v v j&_wDJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ- Resolves: rhbz#1835885
- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)%_SDJan Friesse <jfriesse@redhat.com> 2.4.5-5^y@- Resolves: rhbz#1679792
- Resolves: rhbz#1780134
- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)
a #D; a V+_OEJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492
- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)*_YEJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120
- Rebase to Corosync 2.4.5g)_sEJan Friesse <jfriesse@redhat.com> 2.4.3-6\|- Resolves: rhbz#1542703
- Add spausedd subpackage[(cUDJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`- Resolves: rhbz#1896311
- Resolves: rhbz#1897087
- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)Y'_UDJan Friesse <jfriesse@redhat.com> 2.4.5-7^3- Related: rhbz#1835885
- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)
M ._SEJan Friesse <jfriesse@redhat.com> 2.4.5-5^y@- Resolves: rhbz#1679792
- Resolves: rhbz#1780134
- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)j-cuEJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J@- Related: rhbz#1737884
- Enhance spausedd makefile/,c}EJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik- Resolves: rhbz#1737884
- Resolves: rhbz#1737887
- Do not set exec permission for service file
- Fix CFLAGS definition
> > 2cGEJan Friesse <jfriesse@redhat.com> 2.4.5-7.2av@- Resolves: rhbz#2001969
- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)[1cUEJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`- Resolves: rhbz#1896311
- Resolves: rhbz#1897087
- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)Y0_UEJan Friesse <jfriesse@redhat.com> 2.4.5-7^3- Related: rhbz#1835885
- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)j/_wEJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ- Resolves: rhbz#1835885
- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)
e r+V: e DR
f19ef75ad99fd28a32063032985acd16eed69a49de7940fe80fe25a45d7b20d5DQ
9b1fd6f75c44990182608f11437d29610a09c14eef6cd15e358d8dc204c067a6DP
21cd1d5d48d73a90f3072f23c5e4e21283dbd047dba314b528013a884054068eDO
8a874d1a0c3f0dce30ef48f0095dafcb59e864b2b89528a61ee1b1d0a5dcfb7fDN
68ee3d48388315e955a81bc549710f8201b486ea8413b2e63a516ea8d40e5534DM
d413e9756d3b6aece12ea946151d51900d80c7fc73dbaac617ca6d4212d49e38DL
26c0bf18af70ee3cb9525c40bdea17bad250aa0b3b0200dd8132b995dc4081a9DK
547e7d5fe595fcb6ed9634585475a0cdf56327add42e4ccd74358d8c4a27b140DJ
e5654c00b989b0595c553eaf073114c219aec1d06fb9571ebdcebbdfef5a90d5DI
99812ac04e29b031870c5675a4888ceb7ec75a205bace3fe8e9339e91f0e8109DH
adf023be78972d5813085a5facdbea98c19687e2f35459fa6060b6c2fded31a9DG
c6c5c2f11ff4c5bdd22deb3a88852ae012482664acb196d328e4b290495979edDF
2bf6c6071be41d65c91d31c9399563bd6d9298e9a9911c2cfff1bae35d4209fe
S \ S 5_YFJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120
- Rebase to Corosync 2.4.5g4_sFJan Friesse <jfriesse@redhat.com> 2.4.3-6\|- Resolves: rhbz#1542703
- Add spausedd subpackage 3_cFJan Friesse <jfriesse@redhat.com> 2.4.3-5\|- Resolves: rhbz#1376819
- Resolves: rhbz#1634710
- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)
&s j8cuFJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J@- Related: rhbz#1737884
- Enhance spausedd makefile/7c}FJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik- Resolves: rhbz#1737884
- Resolves: rhbz#1737887
- Do not set exec permission for service file
- Fix CFLAGS definitionV6_OFJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492
- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)
v v j:_wFJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ- Resolves: rhbz#1835885
- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)9_SFJan Friesse <jfriesse@redhat.com> 2.4.5-5^y@- Resolves: rhbz#1679792
- Resolves: rhbz#1780134
- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)
a #D; a V?_OGJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492
- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)>_YGJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120
- Rebase to Corosync 2.4.5g=_sGJan Friesse <jfriesse@redhat.com> 2.4.3-6\|- Resolves: rhbz#1542703
- Add spausedd subpackage[<cUFJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`- Resolves: rhbz#1896311
- Resolves: rhbz#1897087
- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)Y;_UFJan Friesse <jfriesse@redhat.com> 2.4.5-7^3- Related: rhbz#1835885
- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)
M B_SGJan Friesse <jfriesse@redhat.com> 2.4.5-5^y@- Resolves: rhbz#1679792
- Resolves: rhbz#1780134
- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)jAcuGJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J@- Related: rhbz#1737884
- Enhance spausedd makefile/@c}GJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik- Resolves: rhbz#1737884
- Resolves: rhbz#1737887
- Do not set exec permission for service file
- Fix CFLAGS definition
> > FcGGJan Friesse <jfriesse@redhat.com> 2.4.5-7.2av@- Resolves: rhbz#2001969
- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)[EcUGJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`- Resolves: rhbz#1896311
- Resolves: rhbz#1897087
- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)YD_UGJan Friesse <jfriesse@redhat.com> 2.4.5-7^3- Related: rhbz#1835885
- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)jC_wGJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ- Resolves: rhbz#1835885
- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)
S \ S I_YHJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120
- Rebase to Corosync 2.4.5gH_sHJan Friesse <jfriesse@redhat.com> 2.4.3-6\|- Resolves: rhbz#1542703
- Add spausedd subpackage G_cHJan Friesse <jfriesse@redhat.com> 2.4.3-5\|- Resolves: rhbz#1376819
- Resolves: rhbz#1634710
- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)
&s jLcuHJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J@- Related: rhbz#1737884
- Enhance spausedd makefile/Kc}HJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik- Resolves: rhbz#1737884
- Resolves: rhbz#1737887
- Do not set exec permission for service file
- Fix CFLAGS definitionVJ_OHJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492
- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)
v v jN_wHJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ- Resolves: rhbz#1835885
- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)M_SHJan Friesse <jfriesse@redhat.com> 2.4.5-5^y@- Resolves: rhbz#1679792
- Resolves: rhbz#1780134
- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)
D #D [PcUHJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`- Resolves: rhbz#1896311
- Resolves: rhbz#1897087
- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)YO_UHJan Friesse <jfriesse@redhat.com> 2.4.5-7^3- Related: rhbz#1835885
- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)
S \ S S_YIJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120
- Rebase to Corosync 2.4.5gR_sIJan Friesse <jfriesse@redhat.com> 2.4.3-6\|- Resolves: rhbz#1542703
- Add spausedd subpackage Q_cIJan Friesse <jfriesse@redhat.com> 2.4.3-5\|- Resolves: rhbz#1376819
- Resolves: rhbz#1634710
- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)
&s jVcuIJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J@- Related: rhbz#1737884
- Enhance spausedd makefile/Uc}IJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik- Resolves: rhbz#1737884
- Resolves: rhbz#1737887
- Do not set exec permission for service file
- Fix CFLAGS definitionVT_OIJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492
- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)
v v jX_wIJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ- Resolves: rhbz#1835885
- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)W_SIJan Friesse <jfriesse@redhat.com> 2.4.5-5^y@- Resolves: rhbz#1679792
- Resolves: rhbz#1780134
- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)
a #D; a V]_OJJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492
- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)\_YJJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120
- Rebase to Corosync 2.4.5g[_sJJan Friesse <jfriesse@redhat.com> 2.4.3-6\|- Resolves: rhbz#1542703
- Add spausedd subpackage[ZcUIJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`- Resolves: rhbz#1896311
- Resolves: rhbz#1897087
- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)YY_UIJan Friesse <jfriesse@redhat.com> 2.4.5-7^3- Related: rhbz#1835885
- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)
M `_SJJan Friesse <jfriesse@redhat.com> 2.4.5-5^y@- Resolves: rhbz#1679792
- Resolves: rhbz#1780134
- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)j_cuJJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J@- Related: rhbz#1737884
- Enhance spausedd makefile/^c}JJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik- Resolves: rhbz#1737884
- Resolves: rhbz#1737887
- Do not set exec permission for service file
- Fix CFLAGS definition
> > dcGJJan Friesse <jfriesse@redhat.com> 2.4.5-7.2av@- Resolves: rhbz#2001969
- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)[ccUJJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`- Resolves: rhbz#1896311
- Resolves: rhbz#1897087
- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)Yb_UJJan Friesse <jfriesse@redhat.com> 2.4.5-7^3- Related: rhbz#1835885
- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)ja_wJJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ- Resolves: rhbz#1835885
- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)
j jicuKJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J@- Related: rhbz#1737884
- Enhance spausedd makefile/hc}KJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik- Resolves: rhbz#1737884
- Resolves: rhbz#1737887
- Do not set exec permission for service file
- Fix CFLAGS definitionVg_OKJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492
- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)f_YKJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120
- Rebase to Corosync 2.4.5ge_sKJan Friesse <jfriesse@redhat.com> 2.4.3-6\|- Resolves: rhbz#1542703
- Add spausedd subpackage
v v jk_wKJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ- Resolves: rhbz#1835885
- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)j_SKJan Friesse <jfriesse@redhat.com> 2.4.5-5^y@- Resolves: rhbz#1679792
- Resolves: rhbz#1780134
- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)
#D ncGKJan Friesse <jfriesse@redhat.com> 2.4.5-7.2av@- Resolves: rhbz#2001969
- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)[mcUKJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`- Resolves: rhbz#1896311
- Resolves: rhbz#1897087
- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)Yl_UKJan Friesse <jfriesse@redhat.com> 2.4.5-7^3- Related: rhbz#1835885
- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)
S \ S q_YLJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120
- Rebase to Corosync 2.4.5gp_sLJan Friesse <jfriesse@redhat.com> 2.4.3-6\|- Resolves: rhbz#1542703
- Add spausedd subpackage o_cLJan Friesse <jfriesse@redhat.com> 2.4.3-5\|- Resolves: rhbz#1376819
- Resolves: rhbz#1634710
- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)
&s jtcuLJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J@- Related: rhbz#1737884
- Enhance spausedd makefile/sc}LJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik- Resolves: rhbz#1737884
- Resolves: rhbz#1737887
- Do not set exec permission for service file
- Fix CFLAGS definitionVr_OLJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492
- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)
v v jv_wLJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ- Resolves: rhbz#1835885
- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)u_SLJan Friesse <jfriesse@redhat.com> 2.4.5-5^y@- Resolves: rhbz#1679792
- Resolves: rhbz#1780134
- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)
D #D [xcULJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`- Resolves: rhbz#1896311
- Resolves: rhbz#1897087
- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)Yw_ULJan Friesse <jfriesse@redhat.com> 2.4.5-7^3- Related: rhbz#1835885
- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)
S \ S {_YMJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120
- Rebase to Corosync 2.4.5gz_sMJan Friesse <jfriesse@redhat.com> 2.4.3-6\|- Resolves: rhbz#1542703
- Add spausedd subpackage y_cMJan Friesse <jfriesse@redhat.com> 2.4.3-5\|- Resolves: rhbz#1376819
- Resolves: rhbz#1634710
- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)
&s j~cuMJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J@- Related: rhbz#1737884
- Enhance spausedd makefile/}c}MJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik- Resolves: rhbz#1737884
- Resolves: rhbz#1737887
- Do not set exec permission for service file
- Fix CFLAGS definitionV|_OMJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492
- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)
v v j _wMJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ- Resolves: rhbz#1835885
- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)_SMJan Friesse <jfriesse@redhat.com> 2.4.5-5^y@- Resolves: rhbz#1679792
- Resolves: rhbz#1780134
- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)
a #D; a V_ONJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492
- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)_YNJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120
- Rebase to Corosync 2.4.5g_sNJan Friesse <jfriesse@redhat.com> 2.4.3-6\|- Resolves: rhbz#1542703
- Add spausedd subpackage[cUMJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`- Resolves: rhbz#1896311
- Resolves: rhbz#1897087
- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)Y_UMJan Friesse <jfriesse@redhat.com> 2.4.5-7^3- Related: rhbz#1835885
- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)
M _SNJan Friesse <jfriesse@redhat.com> 2.4.5-5^y@- Resolves: rhbz#1679792
- Resolves: rhbz#1780134
- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)jcuNJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J@- Related: rhbz#1737884
- Enhance spausedd makefile/c}NJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik- Resolves: rhbz#1737884
- Resolves: rhbz#1737887
- Do not set exec permission for service file
- Fix CFLAGS definition
> > cGNJan Friesse <jfriesse@redhat.com> 2.4.5-7.2av@- Resolves: rhbz#2001969
- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)[ cUNJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`- Resolves: rhbz#1896311
- Resolves: rhbz#1897087
- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)Y
_UNJan Friesse <jfriesse@redhat.com> 2.4.5-7^3- Related: rhbz#1835885
- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)j _wNJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ- Resolves: rhbz#1835885
- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)
j jcuOJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J@- Related: rhbz#1737884
- Enhance spausedd makefile/c}OJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik- Resolves: rhbz#1737884
- Resolves: rhbz#1737887
- Do not set exec permission for service file
- Fix CFLAGS definitionV_OOJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492
- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)_YOJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120
- Rebase to Corosync 2.4.5g
_sOJan Friesse <jfriesse@redhat.com> 2.4.3-6\|- Resolves: rhbz#1542703
- Add spausedd subpackage
v v j_wOJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ- Resolves: rhbz#1835885
- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)_SOJan Friesse <jfriesse@redhat.com> 2.4.5-5^y@- Resolves: rhbz#1679792
- Resolves: rhbz#1780134
- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)
#D& kgsPDave Anderson <anderson@redhat.com> - 7.2.3-4[5A- Fix bpf.c covscan issues
Resolves: rhbz#1559758g PDave Anderson <anderson@redhat.com> - 7.2.3-3[5@- Rebase to github commits a6cd8408 to da49e201
Resolves: rhbz#1559460cGOJan Friesse <jfriesse@redhat.com> 2.4.5-7.2av@- Resolves: rhbz#2001969
- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)[cUOJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`- Resolves: rhbz#1896311
- Resolves: rhbz#1897087
- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)Y_UOJan Friesse <jfriesse@redhat.com> 2.4.5-7^3- Related: rhbz#1835885
- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)
9D : gPDave Anderson <anderson@redhat.com> - 7.2.3-9\,- Alternate list loop detection option
Resolves: rhbz#1595389
- Readline library tab completion plugin
Resolves: rhbz#1656165& ggPDave Anderson <anderson@redhat.com> - 7.2.3-8[@- Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task.
Resolves: rhbz#16179361g}PDave Anderson <anderson@redhat.com> - 7.2.3-7[Q@- Support ppc64 increased VA range
- Fix ppc64 "bt" command failure reporting invalid NIP value
Resolves: rhbz#1617936g?PDave Anderson <anderson@redhat.com> - 7.2.3-6[?Y- Fix for RHEL7 kernel's eBPF support that uses old IDR facility
Resolves: rhbz#1559758Cg!PDave Anderson <anderson@redhat.com> - 7.2.3-5[ d@- Rebase to github commits b9d76838 to c79a11fa
Resolves: rhbz#1559460
- Fix ppc64/ppc6le stacksize calculation
Resolves: rhbz#1589685
| 7C | C#g!QDave Anderson <anderson@redhat.com> - 7.2.3-5[ d@- Rebase to github commits b9d76838 to c79a11fa
Resolves: rhbz#1559460
- Fix ppc64/ppc6le stacksize calculation
Resolves: rhbz#1589685k"gsQDave Anderson <anderson@redhat.com> - 7.2.3-4[5A- Fix bpf.c covscan issues
Resolves: rhbz#1559758!g QDave Anderson <anderson@redhat.com> - 7.2.3-3[5@- Rebase to github commits a6cd8408 to da49e201
Resolves: rhbz#15594608 oPBhupesh Sharma <bhsharma@redhat.com> - 7.2.3-11.1_k8- crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction
Resolves: rhbz#1854016 i5PDave Anderson <anderson@redhat.com> - 7.2.3-11\- Fix to prevent display of invalid "timer" command entries
Resolves: rhbz#1818084x i PDave Anderson <anderson@redhat.com> - 7.2.3-10\4- Restrict command line to 1500 bytes
Resolves: rhbz#1663792
@ j M @ )i5QDave Anderson <anderson@redhat.com> - 7.2.3-11\- Fix to prevent display of invalid "timer" command entries
Resolves: rhbz#1818084x(i QDave Anderson <anderson@redhat.com> - 7.2.3-10\4- Restrict command line to 1500 bytes
Resolves: rhbz#1663792:'gQDave Anderson <anderson@redhat.com> - 7.2.3-9\,- Alternate list loop detection option
Resolves: rhbz#1595389
- Readline library tab completion plugin
Resolves: rhbz#1656165&&ggQDave Anderson <anderson@redhat.com> - 7.2.3-8[@- Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task.
Resolves: rhbz#16179361%g}QDave Anderson <anderson@redhat.com> - 7.2.3-7[Q@- Support ppc64 increased VA range
- Fix ppc64 "bt" command failure reporting invalid NIP value
Resolves: rhbz#1617936$g?QDave Anderson <anderson@redhat.com> - 7.2.3-6[?Y- Fix for RHEL7 kernel's eBPF support that uses old IDR facility
Resolves: rhbz#1559758
> DP > 1/g}RDave Anderson <anderson@redhat.com> - 7.2.3-7[Q@- Support ppc64 increased VA range
- Fix ppc64 "bt" command failure reporting invalid NIP value
Resolves: rhbz#1617936.g?RDave Anderson <anderson@redhat.com> - 7.2.3-6[?Y- Fix for RHEL7 kernel's eBPF support that uses old IDR facility
Resolves: rhbz#1559758C-g!RDave Anderson <anderson@redhat.com> - 7.2.3-5[ d@- Rebase to github commits b9d76838 to c79a11fa
Resolves: rhbz#1559460
- Fix ppc64/ppc6le stacksize calculation
Resolves: rhbz#1589685k,gsRDave Anderson <anderson@redhat.com> - 7.2.3-4[5A- Fix bpf.c covscan issues
Resolves: rhbz#1559758+g RDave Anderson <anderson@redhat.com> - 7.2.3-3[5@- Rebase to github commits a6cd8408 to da49e201
Resolves: rhbz#15594608*oQBhupesh Sharma <bhsharma@redhat.com> - 7.2.3-11.1_k8- crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction
Resolves: rhbz#1854016
Y V Y s5eSTomáš Mráz <tmraz@redhat.com> - 1.4.11-15VI- crontab: use temporary filename properly ignored by crond84oRBhupesh Sharma <bhsharma@redhat.com> - 7.2.3-11.1_k8- crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction
Resolves: rhbz#18540163i5RDave Anderson <anderson@redhat.com> - 7.2.3-11\- Fix to prevent display of invalid "timer" command entries
Resolves: rhbz#1818084x2i RDave Anderson <anderson@redhat.com> - 7.2.3-10\4- Restrict command line to 1500 bytes
Resolves: rhbz#1663792:1gRDave Anderson <anderson@redhat.com> - 7.2.3-9\,- Alternate list loop detection option
Resolves: rhbz#1595389
- Readline library tab completion plugin
Resolves: rhbz#1656165&0ggRDave Anderson <anderson@redhat.com> - 7.2.3-8[@- Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task.
Resolves: rhbz#1617936
e r+V: e D_
964701bf20ea9285610ce775b493e6d79bf2f27999d29ccbdc6ac91eb4261ce9D^
801be54b282724d9d09516d698bc641c19471a40f11821cbf51804f40228e59aD]
902507007b4e5ee04bd47f98345b605b7cce177b0569460eb0efb299a91918e5D\
e4bb7031f520b296dbe56b80bca148b9f8409329cef2007dd5a06e4548e780d3D[
9e8882a42b481017ad43c670ac8c75a3a878d804f43f7716f685798813397a3fDZ
44ab9339bd5d854867709f046ee7265cdf470dcab6e44935238e9d85f50a3ffbDY
891dab92096ecafec7121bace38c5d802443f838cef21422beb6a451c0e0892dDX
8c0e209a9b3e465d9d43e1e9e5585d8222d61a73748d1a2e8ce486e8b2b25715DW
d97cce4820b6ef5656963548218f0d4ff9ef7c504f16623dd12d6b73c7cf2e2fDV
93e5893e2543f24cc6076a35548745fc96be00bd8f9960f8645d41100dcf0c3aDU
87818b04247bfad1a3a5ad6b7d4ba90f571e7df0d267da4a66fd5e1e17409c65DT
596130fb4480b497134f1ceee905500a7718c15559963c2786a784a511011077DS
64c5a32d35ccc6312c43d89cfee42872bacebecc43ec10e09f90916daedb80da
s D* s 3:aSMarcel Plch <mplch@redhat.com> - 1.4.11-20[
@- Fix race condition when crontab is modified the same second
before and after reading the crontab
- Resolves: rhbz#1638691i9eqSTomáš Mráz <tmraz@redhat.com> - 1.4.11-19Y@- fix URL and source URL of the package (#1501726)*8eqSTomáš Mráz <tmraz@redhat.com> - 1.4.11-18Y- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217) 7e[STomáš Mráz <tmraz@redhat.com> - 1.4.11-17Xۡ- make anacron not to contradict itself in syslog
(job output does not have to be necessarily mailed)6eGSTomáš Mráz <tmraz@redhat.com> - 1.4.11-16X- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
the current context
t r t ?eGTTomáš Mráz <tmraz@redhat.com> - 1.4.11-16X- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
the current contexta>e_SJan Staněk <jstanek@redhat.com> - 1.4.11-24a- Limit memory allocated for file descriptors
Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
Resolves: rhbz#2026289n=aSMarcel Plch <mplch@redhat.com> - 1.4.11-23\d- Make cronie restart on failure
- Resolves: rhbz#1651730<aWSMarcel Plch <mplch@redhat.com> - 1.4.11-22\l@- Backport upstream patch to fix cron failing on
smart card authentication
- Resolves: rhbz#1650314{;aSMarcel Plch <mplch@redhat.com> - 1.4.11-21[- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111
o ]C o EaWTMarcel Plch <mplch@redhat.com> - 1.4.11-22\l@- Backport upstream patch to fix cron failing on
smart card authentication
- Resolves: rhbz#1650314{DaTMarcel Plch <mplch@redhat.com> - 1.4.11-21[- Backport upstream patch to fix -P behavior
- Resolves: rhbz#15361113CaTMarcel Plch <mplch@redhat.com> - 1.4.11-20[
@- Fix race condition when crontab is modified the same second
before and after reading the crontab
- Resolves: rhbz#1638691iBeqTTomáš Mráz <tmraz@redhat.com> - 1.4.11-19Y@- fix URL and source URL of the package (#1501726)*AeqTTomáš Mráz <tmraz@redhat.com> - 1.4.11-18Y- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217) @e[TTomáš Mráz <tmraz@redhat.com> - 1.4.11-17Xۡ- make anacron not to contradict itself in syslog
(job output does not have to be necessarily mailed)
{
{ JeGUTomáš Mráz <tmraz@redhat.com> - 1.4.11-16X- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
the current contextsIeUTomáš Mráz <tmraz@redhat.com> - 1.4.11-15VI- crontab: use temporary filename properly ignored by crond HyATOndřej Pohořelský <opohorel@redhat.com> - 1.4.11-25d@- Set 'missingok' for /etc/cron.deny to not recreate it on update
- Resolves: rhbz#2059479aGe_TJan Staněk <jstanek@redhat.com> - 1.4.11-24a- Limit memory allocated for file descriptors
Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
Resolves: rhbz#2026289nFaTMarcel Plch <mplch@redhat.com> - 1.4.11-23\d- Make cronie restart on failure
- Resolves: rhbz#1651730
o ]C o PaWUMarcel Plch <mplch@redhat.com> - 1.4.11-22\l@- Backport upstream patch to fix cron failing on
smart card authentication
- Resolves: rhbz#1650314{OaUMarcel Plch <mplch@redhat.com> - 1.4.11-21[- Backport upstream patch to fix -P behavior
- Resolves: rhbz#15361113NaUMarcel Plch <mplch@redhat.com> - 1.4.11-20[
@- Fix race condition when crontab is modified the same second
before and after reading the crontab
- Resolves: rhbz#1638691iMeqUTomáš Mráz <tmraz@redhat.com> - 1.4.11-19Y@- fix URL and source URL of the package (#1501726)*LeqUTomáš Mráz <tmraz@redhat.com> - 1.4.11-18Y- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217) Ke[UTomáš Mráz <tmraz@redhat.com> - 1.4.11-17Xۡ- make anacron not to contradict itself in syslog
(job output does not have to be necessarily mailed)
@ @ *UeqVTomáš Mráz <tmraz@redhat.com> - 1.4.11-18Y- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217) Te[VTomáš Mráz <tmraz@redhat.com> - 1.4.11-17Xۡ- make anacron not to contradict itself in syslog
(job output does not have to be necessarily mailed)SeGVTomáš Mráz <tmraz@redhat.com> - 1.4.11-16X- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
the current contextaRe_UJan Staněk <jstanek@redhat.com> - 1.4.11-24a- Limit memory allocated for file descriptors
Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
Resolves: rhbz#2026289nQaUMarcel Plch <mplch@redhat.com> - 1.4.11-23\d- Make cronie restart on failure
- Resolves: rhbz#1651730
j _O j a[e_VJan Staněk <jstanek@redhat.com> - 1.4.11-24a- Limit memory allocated for file descriptors
Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
Resolves: rhbz#2026289nZaVMarcel Plch <mplch@redhat.com> - 1.4.11-23\d- Make cronie restart on failure
- Resolves: rhbz#1651730YaWVMarcel Plch <mplch@redhat.com> - 1.4.11-22\l@- Backport upstream patch to fix cron failing on
smart card authentication
- Resolves: rhbz#1650314{XaVMarcel Plch <mplch@redhat.com> - 1.4.11-21[- Backport upstream patch to fix -P behavior
- Resolves: rhbz#15361113WaVMarcel Plch <mplch@redhat.com> - 1.4.11-20[
@- Fix race condition when crontab is modified the same second
before and after reading the crontab
- Resolves: rhbz#1638691iVeqVTomáš Mráz <tmraz@redhat.com> - 1.4.11-19Y@- fix URL and source URL of the package (#1501726)
`. iaeqWTomáš Mráz <tmraz@redhat.com> - 1.4.11-19Y@- fix URL and source URL of the package (#1501726)*`eqWTomáš Mráz <tmraz@redhat.com> - 1.4.11-18Y- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217) _e[WTomáš Mráz <tmraz@redhat.com> - 1.4.11-17Xۡ- make anacron not to contradict itself in syslog
(job output does not have to be necessarily mailed)^eGWTomáš Mráz <tmraz@redhat.com> - 1.4.11-16X- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
the current contexts]eWTomáš Mráz <tmraz@redhat.com> - 1.4.11-15VI- crontab: use temporary filename properly ignored by crond \yAVOndřej Pohořelský <opohorel@redhat.com> - 1.4.11-25d@- Set 'missingok' for /etc/cron.deny to not recreate it on update
- Resolves: rhbz#2059479
I, afe_WJan Staněk <jstanek@redhat.com> - 1.4.11-24a- Limit memory allocated for file descriptors
Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
Resolves: rhbz#2026289neaWMarcel Plch <mplch@redhat.com> - 1.4.11-23\d- Make cronie restart on failure
- Resolves: rhbz#1651730daWWMarcel Plch <mplch@redhat.com> - 1.4.11-22\l@- Backport upstream patch to fix cron failing on
smart card authentication
- Resolves: rhbz#1650314{caWMarcel Plch <mplch@redhat.com> - 1.4.11-21[- Backport upstream patch to fix -P behavior
- Resolves: rhbz#15361113baWMarcel Plch <mplch@redhat.com> - 1.4.11-20[
@- Fix race condition when crontab is modified the same second
before and after reading the crontab
- Resolves: rhbz#1638691
s D* s 3kaXMarcel Plch <mplch@redhat.com> - 1.4.11-20[
@- Fix race condition when crontab is modified the same second
before and after reading the crontab
- Resolves: rhbz#1638691ijeqXTomáš Mráz <tmraz@redhat.com> - 1.4.11-19Y@- fix URL and source URL of the package (#1501726)*ieqXTomáš Mráz <tmraz@redhat.com> - 1.4.11-18Y- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217) he[XTomáš Mráz <tmraz@redhat.com> - 1.4.11-17Xۡ- make anacron not to contradict itself in syslog
(job output does not have to be necessarily mailed)geGXTomáš Mráz <tmraz@redhat.com> - 1.4.11-16X- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
the current context
r hqikYAndreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16 pyAXOndřej Pohořelský <opohorel@redhat.com> - 1.4.11-25d@- Set 'missingok' for /etc/cron.deny to not recreate it on update
- Resolves: rhbz#2059479aoe_XJan Staněk <jstanek@redhat.com> - 1.4.11-24a- Limit memory allocated for file descriptors
Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
Resolves: rhbz#2026289nnaXMarcel Plch <mplch@redhat.com> - 1.4.11-23\d- Make cronie restart on failure
- Resolves: rhbz#1651730maWXMarcel Plch <mplch@redhat.com> - 1.4.11-22\l@- Backport upstream patch to fix cron failing on
smart card authentication
- Resolves: rhbz#1650314{laXMarcel Plch <mplch@redhat.com> - 1.4.11-21[- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111
If wukYIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagvtkYIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCgsiiYAndreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requires3rk}YIsaac Boukris <iboukris@redhat.com> - 4.10.16-2^?@- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join
ykYAndreas Schneider <asn@redhat.com> - 4.10.17-11`@- resolves: #1876839 - Fix double crash when requesting share mode lockxk%YAndreas Schneider <asn@redhat.com> - 4.10.17-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issueskwiqYAndreas Schneider <asn@redhat.com> - 4.10.17-9_:- related: #1853272 - Add back missing patch hunkspviyYAndreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage
* { * p~iyZAndreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpagew}kZIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagv|kZIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg{iiZAndreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM RequireszkYAndreas Schneider <asn@redhat.com> - 4.10.17-13`@- related: #1876839 - Fix double crash when requesting share mode lock
( ( wk[Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagck_ZAndreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pkwZAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting serviceskZAndreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lockkZAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock k%ZAndreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issueskiqZAndreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunks
k[Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lockk%[Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issueskiq[Andreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunkspiy[Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage
{!M zk [Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server roleP
k7[Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc k_[Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254p kw[Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services
k[Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock
k\Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lockk%\Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issueskiq\Andreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunkspiy\Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage
{!M zk \Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server rolePk7\Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlck_\Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pkw\Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting servicesk\Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock
k]Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lockk]Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lockk%]Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issueskiq]Andreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunks{k
\Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142
V U V {!k
]Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142z k ]Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server roleP k7]Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc k_]Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254p kw]Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services
W G6 W c'k_^Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254p&kw^Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services%k^Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock$k^Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock#k%^Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issues5"k]Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict
, q,k{^Andreas Schneider <asn@redhat.com> - 4.10.16-20c
- resolves: #2119058 - Fix possible segfault in winbind5+k^Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict{*k
^Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142z)k ^Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server roleP(k7^Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl
{!M z1k _Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server roleP0k7_Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc/k__Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254p.kw_Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services-k_Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock
Hn z6k _Andreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023c5k__Andreas Schneider <asn@redhat.com> - 4.10.16-23c@- resolves: #2154364 - Fix CVE-2022-38023q4k{_Andreas Schneider <asn@redhat.com> - 4.10.16-20c
- resolves: #2119058 - Fix possible segfault in winbind53k_Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict{2k
_Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142
e r+V: e Dl
88400b854d053822b230b8e0402132b7559ddccd811a7abcedeb1406f7bd8cbdDk
3f56b1a9c01d9d56c7c61e5e85f89f379f66270b55c609f84ba58194ac11e489Dj
7b215997f9c81095863133061f447c80e870ef64f74f3d78e13b7f9cbe749027Di
efa403ad1b6d2564bce0ec54cef3ee401c15f4282733a928d75bb703119161b5Dh
56345477656cfcf05709f7ed9a7e36814bd7eda39a49f2d5fc436d774aef8e06Dg
b6282c4c1e703d703b92a52a9f3959b4a6412072b5923853674734d4920eb1eeDf
650ecdc0d3c0f2d221347461dc47da74b9aeb8041326a30662c310db8452c289De
d12d34da150d926afed7f5810b9ebdc562f483d0100cdce78091fd464612301dDd
fbcc3e564c6dca446a39edd03f346e88b9881d9d18050e89024d0ff48b46240aDc
030d403b90d83c7791ba3ea26cc659f709c596898fbfbd5d5f6e4b737a1293faDb
4fa63e9cbed9669fb646f612b5c9371ba7bd3f11e6ce5059f28af1cdc7da0780Da
80bfd0e65eafbe59f9079ccbd7a8c303269a333e10aaddfce933c3cc81907c66D`
435acde66414134bd505e6658dda39972f87e643ec0169c1f4c59a938280fa39
V U V {;k
`Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142z:k `Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server roleP9k7`Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc8k_`Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254p7kw`Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services
Gm{ vAiaAndreas Schneider <asn@redhat.com> - 4.10.15-1^- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directoriesr@k}`Andreas Schneider <asn@redhat.com> - 4.10.16-25d@- resolves: #2222250 - Fix netlogon capabilities level 2z?k `Andreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023c>k_`Andreas Schneider <asn@redhat.com> - 4.10.16-23c@- resolves: #2154364 - Fix CVE-2022-38023q=k{`Andreas Schneider <asn@redhat.com> - 4.10.16-20c
- resolves: #2119058 - Fix possible segfault in winbind5<k`Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict
H )M+ H vIkaIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCgHiiaAndreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requires3Gk}aIsaac Boukris <iboukris@redhat.com> - 4.10.16-2^?@- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-joinhFikaAndreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16mEiuaAndreas Schneider <asn@redhat.com> - 4.10.15-5^@- resolves: #1831986 - Fix gencache for normal usersiDimaAndreas Schneider <asn@redhat.com> - 4.10.15-4^@- resolves: #1813017 - Fix smbclient log to fileUCiEaAndreas Schneider <asn@redhat.com> - 4.10.15-3^U@- Removed patch for #1634057|BkaIsaac Boukris <iboukris@redhat.com> - 4.10.15-2^- resolves: #1825505 - Compilation of samba sources fails on RHEL
M .R0 M vQkbIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCgPiibAndreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requires3Ok}bIsaac Boukris <iboukris@redhat.com> - 4.10.16-2^?@- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-joinhNikbAndreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16mMiubAndreas Schneider <asn@redhat.com> - 4.10.15-5^@- resolves: #1831986 - Fix gencache for normal usersiLimbAndreas Schneider <asn@redhat.com> - 4.10.15-4^@- resolves: #1813017 - Fix smbclient log to fileUKiEbAndreas Schneider <asn@redhat.com> - 4.10.15-3^U@- Removed patch for #1634057wJkaIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tag
$ hUikcAndreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16kTiqbAndreas Schneider <asn@redhat.com> - 4.10.17-9_:- related: #1853272 - Add back missing patch hunkspSiybAndreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpagewRkbIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tag
If wYkcIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagvXkcIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCgWiicAndreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requires3Vk}cIsaac Boukris <iboukris@redhat.com> - 4.10.16-2^?@- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join
]kcAndreas Schneider <asn@redhat.com> - 4.10.17-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock\k%cAndreas Schneider <asn@redhat.com> - 4.10.17-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk[iqcAndreas Schneider <asn@redhat.com> - 4.10.17-9_:- related: #1853272 - Add back missing patch hunkspZiycAndreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage
* { * pbiydAndreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpagewakdIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagv`kdIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg_iidAndreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requires^kcAndreas Schneider <asn@redhat.com> - 4.10.17-13`@- related: #1876839 - Fix double crash when requesting share mode lock
( ( wikeIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagchk_dAndreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pgkwdAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting servicesfkdAndreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lockekdAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lockdk%dAndreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issueskciqdAndreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunks
mkeAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode locklk%eAndreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issueskkiqeAndreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunkspjiyeAndreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage
{!M zrk eAndreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server rolePqk7eAndreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlcpk_eAndreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pokweAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting servicesnkeAndreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock
vkfAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lockuk%fAndreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesktiqfAndreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunkspsiyfAndreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage
{!M z{k fAndreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server rolePzk7fAndreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlcyk_fAndreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pxkwfAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting serviceswkfAndreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock
kgAndreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lockkgAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock~k%gAndreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk}iqgAndreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunks{|k
fAndreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142
V U V {k
gAndreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142zk gAndreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server rolePk7gAndreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlck_gAndreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pkwgAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services
W G6 W c k_hAndreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254p
kwhAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services khAndreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lockkhAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lockk%hAndreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issues5kgAndreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict
, qk{hAndreas Schneider <asn@redhat.com> - 4.10.16-20c
- resolves: #2119058 - Fix possible segfault in winbind5khAndreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict{k
hAndreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142z
k hAndreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server roleP k7hAndreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl
{!M zk iAndreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server rolePk7iAndreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlck_iAndreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pkwiAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting serviceskiAndreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock
Hn zk iAndreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023ck_iAndreas Schneider <asn@redhat.com> - 4.10.16-23c@- resolves: #2154364 - Fix CVE-2022-38023qk{iAndreas Schneider <asn@redhat.com> - 4.10.16-20c
- resolves: #2119058 - Fix possible segfault in winbind5kiAndreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict{k
iAndreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142
V U V { k
jAndreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142z k jAndreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server roleP k7jAndreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc k_jAndreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pkwjAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services
Gm{ v%ikAndreas Schneider <asn@redhat.com> - 4.10.15-1^- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directoriesr$k}jAndreas Schneider <asn@redhat.com> - 4.10.16-25d@- resolves: #2222250 - Fix netlogon capabilities level 2z#k jAndreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023c"k_jAndreas Schneider <asn@redhat.com> - 4.10.16-23c@- resolves: #2154364 - Fix CVE-2022-38023q!k{jAndreas Schneider <asn@redhat.com> - 4.10.16-20c
- resolves: #2119058 - Fix possible segfault in winbind5 kjAndreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict
H )M+ H v-kkIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg,iikAndreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requires3+k}kIsaac Boukris <iboukris@redhat.com> - 4.10.16-2^?@- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-joinh*ikkAndreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m)iukAndreas Schneider <asn@redhat.com> - 4.10.15-5^@- resolves: #1831986 - Fix gencache for normal usersi(imkAndreas Schneider <asn@redhat.com> - 4.10.15-4^@- resolves: #1813017 - Fix smbclient log to fileU'iEkAndreas Schneider <asn@redhat.com> - 4.10.15-3^U@- Removed patch for #1634057|&kkIsaac Boukris <iboukris@redhat.com> - 4.10.15-2^- resolves: #1825505 - Compilation of samba sources fails on RHEL
M .R0 M v5klIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg4iilAndreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requires33k}lIsaac Boukris <iboukris@redhat.com> - 4.10.16-2^?@- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-joinh2iklAndreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m1iulAndreas Schneider <asn@redhat.com> - 4.10.15-5^@- resolves: #1831986 - Fix gencache for normal usersi0imlAndreas Schneider <asn@redhat.com> - 4.10.15-4^@- resolves: #1813017 - Fix smbclient log to fileU/iElAndreas Schneider <asn@redhat.com> - 4.10.15-3^U@- Removed patch for #1634057w.kkIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tag
$ 9i/mTomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormallyk8iqlAndreas Schneider <asn@redhat.com> - 4.10.17-9_:- related: #1853272 - Add back missing patch hunksp7iylAndreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpagew6klIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tag
e r+V: e Dy
fa6421de2c15921a2e6fedbf4185a77ea6ccb46658a05d2002f389b7e2a8b60eDx
a9a856900d5a29d9cf94b7fdac8c07e41ad87194e1b959095cdaa6019f30d4c6Dw
4613273bfc2c11c9816fb2825af9aeec01ebd5785d69700793afafb364fdfa5bDv
7e50ed884e06e8b99632be1537d095f84b2961978088e061936f9dc699a523b1Du
ae5e89ffdb193ba77fff5f91338b3087497c816b899809d1d303e53d659e4ea3Dt
438a67adb5128df187df7f5745a6afe2d244d1571ecaf4159b03356b32a60436Ds
36577f1cf5cefd40798e73d112856b462b3290fa90abd70553c107f45542a070Dr
589706b3e3179980b4ac5c2328bf6ff3d88a995174ce4fa64d0ad480965e67c2Dq
7ac7d7acc2695d1247889b192c63a490c516efb9b8c1309543008402c549f1ebDp
73fc0c87cb3098d277406335ceeb029508b87e5d4f5c7d1cc89eeffaf0bc4009Do
3da43cb47b5ad18f1ce3f3b8c4d77981a8aeebe7eeafb778c043bdf4d7883d0eDn
50988ba783fc21f380b1867ef9c2f3753fc650d74ce1e24f4f3f94a5284b4dbfDm
34171e7570b3702011ad6135ba344acf87732fde15fa9714876fa317e1cfd747
N b N k?komZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F- more covscan issues raised from the fix 1672212]>kSmZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F- fixing covscan issue from 1672212=k?mZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created*<kkmZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue];kSmZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;- fixing covscan issue from 1774460::k mZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used
+ uX + ]EkSnZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;- fixing covscan issue from 1774460:Dk nZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used Ci/nTomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormallyBe#mBryan Mason <bmason@redhat.com> - 1:1.6.3-52dh- CVE-2023-32360 cups: Information leak through Cups-Get-Document operationAk;mZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]@k%mZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var
D RZa D Le#nBryan Mason <bmason@redhat.com> - 1:1.6.3-52dh- CVE-2023-32360 cups: Information leak through Cups-Get-Document operationKk;nZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]Jk%nZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /varkIkonZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F- more covscan issues raised from the fix 1672212]HkSnZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F- fixing covscan issue from 1672212Gk?nZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created*FkknZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue
- q3% - ]RkSoZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F- fixing covscan issue from 1672212Qk?oZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created*PkkoZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]OkSoZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;- fixing covscan issue from 1774460:Nk oZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used Mi/oTomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally
q[ :Xk pZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used Wi/pTomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormallyVe#oBryan Mason <bmason@redhat.com> - 1:1.6.3-52dh- CVE-2023-32360 cups: Information leak through Cups-Get-Document operationUk;oZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]Tk%oZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /varkSkooZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F- more covscan issues raised from the fix 1672212
k Z k _k;pZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]^k%pZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /vark]kopZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F- more covscan issues raised from the fix 1672212]\kSpZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F- fixing covscan issue from 1672212[k?pZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created*ZkkpZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]YkSpZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;- fixing covscan issue from 1774460
yL *dkkqZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]ckSqZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;- fixing covscan issue from 1774460:bk qZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used ai/qTomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally`e#pBryan Mason <bmason@redhat.com> - 1:1.6.3-52dh- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation
U hy U k_UrTim Waugh <twaugh@redhat.com> - 1.0.35-21Ub@- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
CVE-2015-3258, CVE-2015-3279).je#qBryan Mason <bmason@redhat.com> - 1:1.6.3-52dh- CVE-2023-32360 cups: Information leak through Cups-Get-Document operationik;qZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]hk%qZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /varkgkoqZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F- more covscan issues raised from the fix 1672212]fkSqZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F- fixing covscan issue from 1672212ek?qZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created
Y wwu Y !ri[rZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^x- 1816109 - Queues are not cleaned up after stopping cups-browsed
- 1811190 - cups-browsed leaks memorytqirZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-27]@- 1775776 - Updated cups-browsed in RHEL 7.7 leaks socketsopiyrZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-26\@- 1508018 - man pages: wrong links in man cups-browsed oi1rZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-25\@- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6unirZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-24\@- fixing covscan issues, backported from upstream - 1485502mi!rZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-23\mA@- 1485502 - Rebase cups-browsed to latest version in upstream cups-filtersli#rZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-22X @- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found
= VE = yi1sZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-25\@- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6uxisZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-24\@- fixing covscan issues, backported from upstream - 1485502wi!sZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-23\mA@- 1485502 - Rebase cups-browsed to latest version in upstream cups-filtersvi#sZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-22X @- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not foundu_UsTim Waugh <twaugh@redhat.com> - 1.0.35-21Ub@- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
CVE-2015-3258, CVE-2015-3279).tiCrZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-29b@- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue clusterqsi}rZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^y@- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown
? re ? i#tZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-22X @- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found_UtTim Waugh <twaugh@redhat.com> - 1.0.35-21Ub@- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
CVE-2015-3258, CVE-2015-3279).~iCsZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-29b@- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue clusterq}i}sZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^y@- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown!|i[sZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^x- 1816109 - Queues are not cleaned up after stopping cups-browsed
- 1811190 - cups-browsed leaks memoryt{isZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-27]@- 1775776 - Updated cups-browsed in RHEL 7.7 leaks socketsoziysZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-26\@- 1508018 - man pages: wrong links in man cups-browsed
n x p n qi}tZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^y@- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown!i[tZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^x- 1816109 - Queues are not cleaned up after stopping cups-browsed
- 1811190 - cups-browsed leaks memorytitZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-27]@- 1775776 - Updated cups-browsed in RHEL 7.7 leaks socketsoiytZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-26\@- 1508018 - man pages: wrong links in man cups-browsed i1tZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-25\@- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6uitZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-24\@- fixing covscan issues, backported from upstream - 1485502i!tZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-23\mA@- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters
? gAA ? oiyuZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-26\@- 1508018 - man pages: wrong links in man cups-browsed
i1uZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-25\@- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6u iuZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-24\@- fixing covscan issues, backported from upstream - 1485502 i!uZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-23\mA@- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters
i#uZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-22X @- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found _UuTim Waugh <twaugh@redhat.com> - 1.0.35-21Ub@- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
CVE-2015-3258, CVE-2015-3279).iCtZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-29b@- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue cluster
) p: ) i!vZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-23\mA@- 1485502 - Rebase cups-browsed to latest version in upstream cups-filtersi#vZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-22X @- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found_UvTim Waugh <twaugh@redhat.com> - 1.0.35-21Ub@- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
CVE-2015-3258, CVE-2015-3279).iCuZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-29b@- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue clusterqi}uZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^y@- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown!i[uZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^x- 1816109 - Queues are not cleaned up after stopping cups-browsed
- 1811190 - cups-browsed leaks memorytiuZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-27]@- 1775776 - Updated cups-browsed in RHEL 7.7 leaks sockets
] j ] iCvZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-29b@- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue clusterqi}vZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^y@- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown!i[vZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^x- 1816109 - Queues are not cleaned up after stopping cups-browsed
- 1811190 - cups-browsed leaks memorytivZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-27]@- 1775776 - Updated cups-browsed in RHEL 7.7 leaks socketsoiyvZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-26\@- 1508018 - man pages: wrong links in man cups-browsed i1vZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-25\@- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6uivZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-24\@- fixing covscan issues, backported from upstream - 1485502
- q3% - ]"kSwZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F- fixing covscan issue from 1672212!k?wZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created* kkwZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue] kSwZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;- fixing covscan issue from 1774460: k wZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used i/wTomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally
q[ :(k xZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used 'i/xTomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally&e#wBryan Mason <bmason@redhat.com> - 1:1.6.3-52dh- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation%k;wZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]$k%wZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /vark#kowZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F- more covscan issues raised from the fix 1672212
k Z k /k;xZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7].k%xZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /vark-koxZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F- more covscan issues raised from the fix 1672212],kSxZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F- fixing covscan issue from 1672212+k?xZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created**kkxZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue])kSxZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;- fixing covscan issue from 1774460 of
flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| ' , 1 6 ; A I Q U Y ] b i m r v { % - 5 9 ? E L R X _ d k r y ±" ñ( ı/ Ʊ4 DZ; ɱA ʱF ˱N ̱T ͱ[ α` ϱe бj ѱo ұt ӱy Ա~ ղ ֲ ײ
ز ٲ ڲ ۲! ܲ& ݲ+ 0 ߲5 : ? D I N S X ] b g l q v {
# ( - 2 8 < A E J N T X ^ b h o v |
yL *4kkyZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]3kSyZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;- fixing covscan issue from 1774460:2k yZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used 1i/yTomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally0e#xBryan Mason <bmason@redhat.com> - 1:1.6.3-52dh- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation
c hy c ;i/zTomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally:e#yBryan Mason <bmason@redhat.com> - 1:1.6.3-52dh- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation9k;yZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]8k%yZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /vark7koyZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F- more covscan issues raised from the fix 1672212]6kSyZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F- fixing covscan issue from 16722125k?yZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created
e r+V: e D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~
8180d23815951b3c5be397846577728116502dad35bbc2dd67b7c4188244e465D}
5a07757ffcab76dc74eef1e1537c4ea823f723bae2c05ab1dd29679d95478db1D|
a979b1653b72f0551faf8fa54eed42be4d51511d962ed09d02ece63f2402d5f7D{
dfc95bdd8057839d4b45153318acb4e09f4da257afee1c57c07781870a68ecefDz
c9fd3024d128c4accf8a1b5a9b3207e10e714a336f6fe04b88a1d557e2bc7a24
N b N kAkozZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F- more covscan issues raised from the fix 1672212]@kSzZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F- fixing covscan issue from 1672212?k?zZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created*>kkzZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]=kSzZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;- fixing covscan issue from 1774460:<k zZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used
A uX A Fc1{Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y - prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)Ec+{Kamil Dudka <kdudka@redhat.com> - 7.29.0-51[j@- require a new enough version of nss-pem to avoid regression in yum (#1610998)De#zBryan Mason <bmason@redhat.com> - 1:1.6.3-52dh- CVE-2023-32360 cups: Information leak through Cups-Get-Document operationCk;zZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]Bk%zZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var
6 )7 6 vNs}{Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)Mc'{Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^?@- http: free protocol-specific struct in setup_connection callback (#1836773)Lc%{Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)hKcq{Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]e@- allow curl to POST from a char device (#1769307)|Jc{Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]?- fix auth failure with duplicated WWW-Authenticate header (#1754736)hIcq{Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik- fix TFTP receive buffer overflow (CVE-2019-5436)jHcu{Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\ - make `curl --tlsv1` backward compatible (#1672639)}Gc{Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)
1 s 1 hTcq|Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]e@- allow curl to POST from a char device (#1769307)|Sc|Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]?- fix auth failure with duplicated WWW-Authenticate header (#1754736)hRcq|Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik- fix TFTP receive buffer overflow (CVE-2019-5436)jQcu|Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\ - make `curl --tlsv1` backward compatible (#1672639)}Pc|Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639) Oc1|Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y - prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)
yxj N[a?}Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24dZci}Honza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013jYio}Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063) XwE|Jacek Migacz <jmigacz@redhat.com> - 7.29.0-59.el7_9.2eJ&- fix HTTP proxy deny use after free (CVE-2022-43552)
- rebuild certs with 2048-bit RSA keysvWs}|Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)Vc'|Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^?@- http: free protocol-specific struct in setup_connection callback (#1836773)Uc%|Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)
* s * n`c}}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)a_cc}Jakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)q^_}Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)]c#}Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)\_)}Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ Nea?~Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24ddci~Honza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013jcio~Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)db]o}Simo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842cacg}Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * njc}~Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)aicc~Jakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)qh_~Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)gc#~Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)f_)~Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ Noa?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24dnciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013jmioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)dl]o~Simo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842ckcg~Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * ntc}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)asccJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)qr_Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)qc#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)p_)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ Nya?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24dxciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013jwioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)dv]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842cucgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * n~c}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)a}ccJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)q|_Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017){c#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)z_)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ Na?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24dciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013jioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)d ]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842ccgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * nc}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)accJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)q_Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)c#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)_)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ N
a?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24d ciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013j ioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)d
]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842c cgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * nc}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)accJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)q_Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)c#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)_)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ Na?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24dciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013jioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)d]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842ccgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * n c}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)accJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)q_Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)c#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)_)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ N!a?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24d ciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013j ioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)d ]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842c cgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * n&c}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)a%ccJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)q$_Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)#c#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)"_)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ N+a?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24d*ciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013j)ioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)d(]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842c'cgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * n0c}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)a/ccJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)q._Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)-c#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065),_)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ N5a?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24d4ciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013j3ioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)d2]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842c1cgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * n:c}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)a9ccJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)q8_Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)7c#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)6_)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ N?a?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24d>ciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013j=ioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)d<]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842c;cgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
e r+V: e D
d008be734234764be6a4c1b2f1c97cad53b746ecc9d1086444715833c6eb8450D
9fc8f4ae81c019b16a882823948eff561fe0f6ad38be509f514a5c287a60d121D
b1fa72dca82442418098746eaa9881ac7e92678c41e6786a458c28d77235fd5eD
4fc0e17577976ecf2487198134b9f2656bdc36caf8e27c75efb6aff14204088eD
925078e3fe326e7212b074bf495287d0fafc0395d9657b439a01b27d1539037eD
c960158be24b783ab7fb4a317899b83f806692c1e48426fe46c6bee909357ee5D
5a42bda7621305ca3bcd588a0c84aac743aba372ea8ee558945564b62173e3f3D
995c318e872c57fa7ce17355320c34d3fdd0774343e691cc23d9e9215ad53931D
94d6c80d9b08af719fa8a5e007bf753a3f13406d99bcd8411d914c6115c3b571D
c92bf980488dff6128c5564f2f75712ccb2a9a0f859f4667af435f967eef4c45D
ffcf7016d990141a16d89aca74ebc89f797e93581bb8c97a08c83f5bf4ae47e4D
e1d065bfaef705d407c6134352d1afc64ecf26a5970a0e5282f6dda745483db8D
4579c7a7925097881dd33b28c72cce227a024a5f071fa4cd0c5bb09cd76d8ec0
* s * nDc}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)aCccJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)qB_Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)Ac#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)@_)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ NIa?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24dHciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013jGioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)dF]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842cEcgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * nNc}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)aMccJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)qL_Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)Kc#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)J_)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ NSa?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24dRciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013jQioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)dP]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842cOcgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * nXc}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)aWccJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)qV_Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)Uc#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)T_)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ N]a?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24d\ciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013j[ioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)dZ]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842cYcgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * nbc}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)aaccJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)q`_Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)_c#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)^_)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ Nga?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24dfciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013jeioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)dd]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842cccgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * nlc}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)akccJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)qj_Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)ic#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)h_)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ Nqa?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24dpciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013joioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)dn]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842cmcgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * nvc}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)auccJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)qt_Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)sc#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)r_)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ N{a?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24dzciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013jyioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)dx]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842cwcgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * n c}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)accJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)q~_Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)}c#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)|_)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ Na?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24dciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013jioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)d]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842ccgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * n
c}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)a ccJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)q_Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)c#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)_)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ Na?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24dciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013j
ioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)d ]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842c cgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * nc}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)accJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)q_Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)c#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)_)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ Na?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24dciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013jioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)d]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842ccgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * n c}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)a ccJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)q _Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)c#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)_)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ N#a?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24d"ciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013j!ioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)d ]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842c cgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * n(c}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)a'ccJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)q&_Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)%c#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)$_)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
3_ N-a?Daniel Mach <dmach@redhat.com> - 2.1.26-17RU- Mass rebuild 2014-01-24d,ciHonza Horak <hhorak@redhat.com> - 2.1.26-16Rx@- Rebuild for mariadb-libs
Related: #1045013j+ioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R&- compile cyrus-sasl with -O3 on ppc64 (#1051063)d*]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842c)cgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
* s * n2c}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé- Allow cyrus sasl to get the ssf from gssapi (#1431586)a1ccJakub Jelen <jjelen@redhat.com> - 2.1.26-21XO@- support proper SASL GSS-SPNEGO (#1421663)q0_Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va@- GSSAPI: Use per-connection mutex where possible (#1263017)/c#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)._)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)
K 3 K 8[9Jeff Moyer <jmoyer@redhat.com> - 64.1-2\e- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348?7[%Jeff Moyer <jmoyer@redhat.com> - 64.1-1\@- Rebase to v64.1 (Jeff Moyer)
- add security commands
- fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441)6W}Jeff Moyer <jmoyer@redhat.com> - 62-1[~- Rebase to v62 (Jeff Moyer)
- a new monitor command / daemon
- an ndctl udev rule for recording the unsafe shutdown count
- smart error injection
- create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320h5[yJeff Moyer <jmoyer@redhat.com> - 60.3-4[^- Apply all patches (Jeff Moyer)
- Related: bz#1456320d4]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8- Fix for CVE-2022-24407
- Resolves: rhbz#2055842c3cgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf- Avoid undefined symbols on s390x (#1516193)
C ^ C <_9Jeff Moyer <jmoyer@redhat.com> - 65.4.el7]QT- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#17403834;_ Jeff Moyer <jmoyer@redhat.com> - 65.3.el7]Ik- modify nvdimm-security.conf touse '&&' instead of ';'
Without this change, the module doesn't load
- Resolves: rhbz#1725405P:_CJeff Moyer <jmoyer@redhat.com> - 65.2.el7]>- Remove 'daxctl migrate-device-model' command. We won't
support hot-plugging device dax into the memory hierarchy
on RHEL 7.
- Resolves: rhbz#1734153 9__Jeff Moyer <jmoyer@redhat.com> - 65.1.el7]9- Rebase to v65
- clear-errors: new command to clear errors on a namespace
- monitor: remove the requirement of a default config
- sanitize-dimm: allow a zero-key for secure-erase
- sanitize-dimm: preserve keys after an overwrite
- load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481
c ?A[%Jeff Moyer <jmoyer@redhat.com> - 64.1-1\@- Rebase to v64.1 (Jeff Moyer)
- add security commands
- fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441)@W}Jeff Moyer <jmoyer@redhat.com> - 62-1[~- Rebase to v62 (Jeff Moyer)
- a new monitor command / daemon
- an ndctl udev rule for recording the unsafe shutdown count
- smart error injection
- create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320h?[yJeff Moyer <jmoyer@redhat.com> - 60.3-4[^- Apply all patches (Jeff Moyer)
- Related: bz#1456320 >_#Jeff Moyer <jmoyer@redhat.com> - 65.6.el7_ܙ- add space to install_items in dracut config file
- Resolves: rhbz#1909233~=_ Jeff Moyer <jmoyer@redhat.com> - 65.5.el7]w@- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199
e r+V: e D
917535cc1bccdcfa4383143cc52d13f8fd161a5ec8f1037f606123737f818acfD
39c70285432c56fe5dd79f0d155069d48956d10fcdcac838a4590c4a44b0b521D
88e796afa3934d3cefb09a6a575714bdc8aede8ee6a3c6b7be0bb59a130d5efdD
cab18530e297449d292d630ec6e205013f25a4889616836298778283e58c4646D
e5b4fe58bfeb115113e7edd7fb472941f60801137b90d42e57b06b22865ac47dD
a18e979a837324a9730fc3e5b08e4f228f22d46c20c0a6445f7147444b8449c3D
2ed2fcd8e79d8a62a374c054083792b657cb4d4668e39188deeb1ad3d72c948fD
d7480f6ca0e1f89838274cae938826c82a1a691a1f3fa5dc9b3eda6662d64f7bD
dd427ef9920f27966d5b507f154c88d80a03bc944b494a89f98eae387f25e950D
b063de6c9fdc361af76d98bb3d3b31fd5ee05e120f1dc64f9ddfe77217c012c6D
3f1d1aaf2ad1912b72db538da9e7a824ec1beb3f7eceb8da6ab8b296c810b913D
8c8d68b411cf4b1553f6d61ec9e5e792aab640f1b6ce5645df2f4da01896ad23D
8e01728503e8663cde52ff2eb87bcbcd9a04b60fa17e1729dc2658f1cce309dc
E s E 4E_ Jeff Moyer <jmoyer@redhat.com> - 65.3.el7]Ik- modify nvdimm-security.conf touse '&&' instead of ';'
Without this change, the module doesn't load
- Resolves: rhbz#1725405PD_CJeff Moyer <jmoyer@redhat.com> - 65.2.el7]>- Remove 'daxctl migrate-device-model' command. We won't
support hot-plugging device dax into the memory hierarchy
on RHEL 7.
- Resolves: rhbz#1734153 C__Jeff Moyer <jmoyer@redhat.com> - 65.1.el7]9- Rebase to v65
- clear-errors: new command to clear errors on a namespace
- monitor: remove the requirement of a default config
- sanitize-dimm: allow a zero-key for secure-erase
- sanitize-dimm: preserve keys after an overwrite
- load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481 B[9Jeff Moyer <jmoyer@redhat.com> - 64.1-2\e- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348
ql )JW}Jeff Moyer <jmoyer@redhat.com> - 62-1[~- Rebase to v62 (Jeff Moyer)
- a new monitor command / daemon
- an ndctl udev rule for recording the unsafe shutdown count
- smart error injection
- create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320hI[yJeff Moyer <jmoyer@redhat.com> - 60.3-4[^- Apply all patches (Jeff Moyer)
- Related: bz#1456320 H_#Jeff Moyer <jmoyer@redhat.com> - 65.6.el7_ܙ- add space to install_items in dracut config file
- Resolves: rhbz#1909233~G_ Jeff Moyer <jmoyer@redhat.com> - 65.5.el7]w@- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199 F_9Jeff Moyer <jmoyer@redhat.com> - 65.4.el7]QT- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#1740383
: = : PN_CJeff Moyer <jmoyer@redhat.com> - 65.2.el7]>- Remove 'daxctl migrate-device-model' command. We won't
support hot-plugging device dax into the memory hierarchy
on RHEL 7.
- Resolves: rhbz#1734153 M__Jeff Moyer <jmoyer@redhat.com> - 65.1.el7]9- Rebase to v65
- clear-errors: new command to clear errors on a namespace
- monitor: remove the requirement of a default config
- sanitize-dimm: allow a zero-key for secure-erase
- sanitize-dimm: preserve keys after an overwrite
- load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481 L[9Jeff Moyer <jmoyer@redhat.com> - 64.1-2\e- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348?K[%Jeff Moyer <jmoyer@redhat.com> - 64.1-1\@- Rebase to v64.1 (Jeff Moyer)
- add security commands
- fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441
H8I )TW}Jeff Moyer <jmoyer@redhat.com> - 62-1[~- Rebase to v62 (Jeff Moyer)
- a new monitor command / daemon
- an ndctl udev rule for recording the unsafe shutdown count
- smart error injection
- create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320hS[yJeff Moyer <jmoyer@redhat.com> - 60.3-4[^- Apply all patches (Jeff Moyer)
- Related: bz#1456320 R_#Jeff Moyer <jmoyer@redhat.com> - 65.6.el7_ܙ- add space to install_items in dracut config file
- Resolves: rhbz#1909233~Q_ Jeff Moyer <jmoyer@redhat.com> - 65.5.el7]w@- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199 P_9Jeff Moyer <jmoyer@redhat.com> - 65.4.el7]QT- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#17403834O_ Jeff Moyer <jmoyer@redhat.com> - 65.3.el7]Ik- modify nvdimm-security.conf touse '&&' instead of ';'
Without this change, the module doesn't load
- Resolves: rhbz#1725405
: = : PX_CJeff Moyer <jmoyer@redhat.com> - 65.2.el7]>- Remove 'daxctl migrate-device-model' command. We won't
support hot-plugging device dax into the memory hierarchy
on RHEL 7.
- Resolves: rhbz#1734153 W__Jeff Moyer <jmoyer@redhat.com> - 65.1.el7]9- Rebase to v65
- clear-errors: new command to clear errors on a namespace
- monitor: remove the requirement of a default config
- sanitize-dimm: allow a zero-key for secure-erase
- sanitize-dimm: preserve keys after an overwrite
- load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481 V[9Jeff Moyer <jmoyer@redhat.com> - 64.1-2\e- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348?U[%Jeff Moyer <jmoyer@redhat.com> - 64.1-1\@- Rebase to v64.1 (Jeff Moyer)
- add security commands
- fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441
H8I )^W}Jeff Moyer <jmoyer@redhat.com> - 62-1[~- Rebase to v62 (Jeff Moyer)
- a new monitor command / daemon
- an ndctl udev rule for recording the unsafe shutdown count
- smart error injection
- create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320h][yJeff Moyer <jmoyer@redhat.com> - 60.3-4[^- Apply all patches (Jeff Moyer)
- Related: bz#1456320 \_#Jeff Moyer <jmoyer@redhat.com> - 65.6.el7_ܙ- add space to install_items in dracut config file
- Resolves: rhbz#1909233~[_ Jeff Moyer <jmoyer@redhat.com> - 65.5.el7]w@- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199 Z_9Jeff Moyer <jmoyer@redhat.com> - 65.4.el7]QT- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#17403834Y_ Jeff Moyer <jmoyer@redhat.com> - 65.3.el7]Ik- modify nvdimm-security.conf touse '&&' instead of ';'
Without this change, the module doesn't load
- Resolves: rhbz#1725405
: = : Pb_CJeff Moyer <jmoyer@redhat.com> - 65.2.el7]>- Remove 'daxctl migrate-device-model' command. We won't
support hot-plugging device dax into the memory hierarchy
on RHEL 7.
- Resolves: rhbz#1734153 a__Jeff Moyer <jmoyer@redhat.com> - 65.1.el7]9- Rebase to v65
- clear-errors: new command to clear errors on a namespace
- monitor: remove the requirement of a default config
- sanitize-dimm: allow a zero-key for secure-erase
- sanitize-dimm: preserve keys after an overwrite
- load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481 `[9Jeff Moyer <jmoyer@redhat.com> - 64.1-2\e- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348?_[%Jeff Moyer <jmoyer@redhat.com> - 64.1-1\@- Rebase to v64.1 (Jeff Moyer)
- add security commands
- fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441
' H8 ' h{David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.46-1[@- ifup-post: fix incorrect condition for RESOLV_MODS (bug #1610411)g{David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.45-1[W- network: parsing of /proc/mounts returned (bug #1572659)
- netconsole: LSB header added (bug #1508489)
- ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384) f_#Jeff Moyer <jmoyer@redhat.com> - 65.6.el7_ܙ- add space to install_items in dracut config file
- Resolves: rhbz#1909233~e_ Jeff Moyer <jmoyer@redhat.com> - 65.5.el7]w@- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199 d_9Jeff Moyer <jmoyer@redhat.com> - 65.4.el7]QT- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#17403834c_ Jeff Moyer <jmoyer@redhat.com> - 65.3.el7]Ik- modify nvdimm-security.conf touse '&&' instead of ';'
Without this change, the module doesn't load
- Resolves: rhbz#1725405
+ & + coaiJan Macku <jamacku@redhat.com> - 9.49.53-1^Ǿ- rwtab: Add support for chrony (bug #1838260)naCJan Macku <jamacku@redhat.con> - 9.49.52-1^x- ifup-eth: Switch to bc utility, which supports floating point computations (bug #1609687)ZmaWJan Macku <jamacku@redhat.com> - 9.49.51-1^r
@- Fix inline comment - (bug #1773798)laCJan Macku <jamacku@redhat.com> - 9.49.50-1^h- Wait for scope link addresses as well as for scope global addresses - ipv6 (bug #1773798) ka]Jan Macku <jamacku@redhat.com> - 9.49.49-1]Z@- ifup-eth: Check that device name is set (bug #1741830)
- Add option for IPv6 GRE tunnel (bug #1691552)ajacJan Macku <jamacku@redhat.com> - 9.49.48-1]Ik- network: don't fail with IFDOWN_ON_SHUTDOWN (bug #1693977)
- Configure autorelabel service to output to journal and to console if set (bug #1634661)
- Fix changelog typo^ia_Jan Macku <jamacku@redhat.com> - 9.49.47-1\- Fix file permissions for /var/log/dmesg
} | } cvsWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.us9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. ts!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. ssIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.rrsuMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.mqYMarian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.npqoJan Macku <jamacku@redhat.com> - 9.49.53-1.el7_9.1_- rwtab: Allow updating mlocate.db (bug #1880095)
n r n |sIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.r{suMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.
zMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Qy Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.x Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
ws#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.
st[ Q Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools. Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
s#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.csWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.~s9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. }s!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.
@ rZ4 @
s#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.csWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.s9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. s!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. sIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.tgMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.
d u d mYMarian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.CMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.t
gMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.
Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
E ]^ E Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
s#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.csWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.s9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. s!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. sIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.rsuMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.
+- s!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. sIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.rsuMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.mYMarian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.
Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.
gs
"Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q! Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools. Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
s#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c sWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2. s9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.
E ]^ E ) Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
(s#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c'sWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.&s9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. %s!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. $sIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.r#suMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.
+& /s!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. .sIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.r-suMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.t,gMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
+Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q* Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.
gs
5Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q4 Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.3 Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
2s#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c1sWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.0s9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.
C [\ C < Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
;s#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c:sWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.9s9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. 8s!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. 7sIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.t6gMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
1 +&_ 1 Bs!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. AsIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.C@Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.t?gMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
>Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q= Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.
e r+V: e D-
12fb546150a8175c1aa95419a75e512972cb4c6c8eea1ade84e3319b1cfadaeaD,
c8f7c98bcb2f070e4421790cc39453b0046912b5c8325ad6660342177869da6eD+
e3048df9af89b5496455f0ad788ff0b492712c8c06683cf6f908894638139c9fD*
a7f93d258bd14e3d81be8c58b2998d78081d84b5f8f763c1bff64b3571ca321eD)
dabd6fc3fcccc9d794b28168afdd8fb94f2d78fda10a5751459cee469f8412d4D(
0986dce8e3a59471cabc7ed457e23c3f0fdc81e3cbab4093eaa0426e2d5d26efD'
3feced91f7391352cfca0debae0c2aa43febbeee7d24929c75cd8d1d5a6b782eD&
06a5cb180f3ca29cdae7dd9547b29c30079ef85e1809389608777308ad5e4c3aD%
9e77aa7192e0e6ca06b1a23c5e174410e0034b59dedc6cc1edf7458486f920edD$
23c887a392429ec463dea994475481a04b8745d5f29926c149d6f3f48c5ebde0D#
96abc02747879aa68bd335dadad5f1e2d5ea64c519db929820194757e80af933D"
4c4e8afba69331a45497c224ebaa7b237c5e25c3fa2dba00bb45fa49fc41aed8D!
af5e8ccb9d54f4f9b71774537a4c1e69aad8ae1b83815d24f5930bb72e20d0f8
gs
HMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.QG Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.F Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
Es#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.cDsWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.Cs9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.
R< Os9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. Ns!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. MsIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.rLsuMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.mKYMarian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.CJMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.tIgMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
rUsuMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.
TMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.QS Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.R Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
Qs#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.cPsWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.
_9E [ Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
Zs#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.cYsWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.Xs9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. Ws!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. VsIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.
_ +& _ as9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. `s!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. _sIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.t^gMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
]Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q\ Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.
tggMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
fMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Qe Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.d Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
cs#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.cbsWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.
' 9T& ' cnsWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.ms9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. ls!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. ksIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.rjsuMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.miYMarian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.ChMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.
r rtsuMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.msYMarian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.
rMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Qq Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.p Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
os#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.
_9E z Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
ys#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.cxsWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.ws9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. vs!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. usIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.
a +( a s9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. s!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. ~sIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.r}suMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.
|Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q{ Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.
2 2 rsuMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.tgMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools. Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
s#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.csWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.
_9E
Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
s#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c sWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.
s9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. s!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. sIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.
_ +& _ s9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. s!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. sIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.tgMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.
tgMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools. Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
s#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.csWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.
~ 9 r ~
s#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c sWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2. s9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. s!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. sIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.CMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.
d u d m%YMarian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.C$Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.t#gMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
"Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q! Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools. Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
E ]^ E , Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
+s#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c*sWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.)s9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. (s!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. 'sIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.r&suMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.
+- 2s!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. 1sIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.r0suMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.m/YMarian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.
.Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q- Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.
gs
8Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q7 Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.6 Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
5s#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c4sWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.3s9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.
E ]^ E ? Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
>s#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c=sWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.<s9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. ;s!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. :sIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.r9suMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.
+& Es!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. DsIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.rCsuMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.tBgMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
AMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q@ Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.
e r+V: e D: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.
68e1429d8531b268902804fdf15f6eb8ffcadc2d36315c6090a3edb14eb2ab13
gs
KMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.QJ Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.I Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
Hs#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.cGsWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.Fs9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.
C [\ C R Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
Qs#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.cPsWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.Os9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. Ns!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. MsIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.tLgMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
1 +&_ 1 Xs!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. WsIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.CVMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.tUgMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
TMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.QS Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.
gs
^Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q] Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.\ Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
[s#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.cZsWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.Ys9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.
R< es9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. ds!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. csIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.rbsuMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.maYMarian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.C`Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.t_gMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
9 9 rlsuMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.mkYMarian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.
jMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Qi Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.h Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
gs#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.cfsWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.
_9E r Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
qs#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.cpsWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.os9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. ns!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. msIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.
a +( a xs9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. ws!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. vsIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.rusuMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.
tMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Qs Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.
2 2 rsuMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y@- Bug fix release.
- See WHATS_NEW file for details.t~gMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
}Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q| Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.{ Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
zs#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.cysWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.
_9E Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
s#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.csWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.s9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. s!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. sIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.
_ +& _ s9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.
s!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. sIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.tgMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.
tgMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools. Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
s#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c sWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.
~ 9 r ~
s#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.csWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^- Update boom to bug fix release 1.2.s9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug. s!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^@- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1. sIMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^H- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.CMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.
u C Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.tgMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'- Fix fsadm behavior with missing parameters.
Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_- Fix lvresize handling of fsck exit code 1 - FS errors corrected.Q Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_@- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools. Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_- Fix conversion to mirrored mirror log with larger regionsize.
C q'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556 qABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651 qKBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d- Modify 0250-RHBZ-1610867-rescan-change.patch
* Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651
M M / qoBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 of ~flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv|
" ) / 5 < B H O U [ a g n t z
! " # $% %, &2 '8 (? )E +K ,R -X .^ /e 0l 1r 2x 3 4 5 6 7 8 9 : <# =' >( ?) @, A0 B1 C2 D5 E: F= G> HA IE KG LH MK NO OP PQ QT RY SZ T[ U^ Vb Wc Xd Yg Zl [m \n ]q ^v _y `z a} b c d e f g h
i j k l m n o p q# r( s) t* u- v2 w5 x6 y9 z= {> |? }B
Q 0#qqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066"q}Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855q!qsBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
$ ,@$ 'qABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651}&q Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901h%qaBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197P$q1Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
q q (q'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
M M /)qoBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
Q 0,qqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066+q}Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855q*qsBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
& ,@& 0q=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}/q Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901h.qaBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197P-q1Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
q q 1q'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
M M /2qoBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
Q 05qqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #171450664q}Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855q3qsBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
,@& :qBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #21349059q=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}8q Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901h7qaBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197P6q1Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
C =q'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556<qABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651 ;qKBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d- Modify 0250-RHBZ-1610867-rescan-change.patch
* Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651
M M />qoBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
Q 0AqqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066@q}Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855q?qsBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
,@ EqKBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d- Modify 0250-RHBZ-1610867-rescan-change.patch
* Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651}Dq Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901hCqaBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197PBq1Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
e r+V: e DG
3d901cc9a4697e9c08105de93d1a190650a8439e1dabe11a97d17c67cd1d951cDF
09d536dbeed2bb97193afabb9564cc6e6def3636f719ed0e3bbb8c0e575f7033DE
c1769c3e3380140052696701ca6809cb191ea6c245caf1c658a1b8bc580f13baDD
393b6f38ca21b31f198eb40d2fbdecb79a43ca0306ac436c4ebcc4fc8a15043aDC
61772a9e48d677eb7feb9225da4fdbfa417f99764a26adf0ba4e311baad2696cDB
ec4cb2d5a569d854ac525bd458045223e598500765770d860e5bf0b84a41767bDA
fe463cbf93e98cd763c89bf55103a9c84e8d48e998eb06542fe3e3fb72a10dd9D@
34ff7de8a4ca78de046e416a969184543fb961e44c8500ad933f5d0d9d71bdb4D?
1333d18f0d5f36acf0badba03a7250ddf92df7f789f4674ece2dfcfcd925f3b3D>
8bf0a6fa452bb777d2800beaf0ba2e84f3dd1b17964e1b1bb26b099bcd5ba413D=
49c502046e8fd1833a810286c8db37a87f18dc47667827f45a56267aefdac60fD<
973cf0ccc163c9374db09502b1e69f3323abc0960eca2ad66bfae874ac23d131D;
4800c473b78c5271f956b53fa3f8a3f696c8b2709fa3afd5457178a5946300eb
d Gq'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556FqABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651
M M /HqoBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
Q 0KqqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066Jq}Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855qIqsBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
$ ,@$ OqABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651}Nq Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901hMqaBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197PLq1Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
q q Pq'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
M M /QqoBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
Q 0TqqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066Sq}Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855qRqsBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
,@& YqABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651Xq=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}Wq Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901hVqaBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197PUq1Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
q q Zq'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
M M /[qoBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
Q 0^qqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066]q}Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855q\qsBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
& ,@& bq=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}aq Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901h`qaBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197P_q1Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
q q cq'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
M M /dqoBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
Q 0gqqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066fq}Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855qeqsBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
,@& lqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905kq=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}jq Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901hiqaBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197Phq1Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
q q mq'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
M M /nqoBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
Q 0qqqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066pq}Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855qoqsBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
,@& vqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905uq=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}tq Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901hsqaBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197Prq1Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
C yq'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556xqABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651 wqKBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d- Modify 0250-RHBZ-1610867-rescan-change.patch
* Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651
M M /zqoBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
Q 0}qqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066|q}Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855q{qsBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
,@ qKBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d- Modify 0250-RHBZ-1610867-rescan-change.patch
* Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651} q Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901hqaBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197P~q1Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
d q'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556qABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651
M M /qoBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
Q 0qqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066q}Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855qqsBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
$ ,@$ qABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651}
q Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901h qaBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197Pq1Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
q q q'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
M M /
qoBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
Q 0qqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066q}Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855qqsBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
,@& qABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651q=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}q Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901hqaBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197Pq1Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
q q q'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
M M /qoBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
Q 0qqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066q}Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855qqsBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
& ,@& q=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462} q Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901h qaBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197Pq1Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
q q q'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
M M / qoBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
Q 0#qqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066"q}Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855q!qsBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
,@& (qBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905'q=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}&q Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901h%qaBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197P$q1Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
q q )q'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
M M /*qoBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
Q 0-qqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066,q}Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855q+qsBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
,@& 2qBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #21349051q=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}0q Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901h/qaBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197P.q1Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
C 5q'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #16795564qABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651 3qKBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d- Modify 0250-RHBZ-1610867-rescan-change.patch
* Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651
M M /6qoBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
Q 09qqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #171450668q}Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855q7qsBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
$ ,@$ =qABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651}<q Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901h;qaBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197P:q1Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
q q >q'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
M M /?qoBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
Q 0BqqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066Aq}Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855q@qsBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
& ,@& Fq=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}Eq Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901hDqaBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197PCq1Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
e r+V: e DT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 q Gq'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
M M /HqoBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
Q 0KqqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066Jq}Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855qIqsBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
,@& PqBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905Oq=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}Nq Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901hMqaBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197PLq1Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
" )Si " [XiQMarian Csontos <mcsontos@redhat.com> - 0.8.5-3^- Check input file exists earlier.yWi Marian Csontos <mcsontos@redhat.com> - 0.8.5-2]@- Remove obsolete pool-inactive option from thin_trim man page.jVioMarian Csontos <mcsontos@redhat.com> - 0.8.5-1\F@- Additional fixes for thin_dump and thin_repair.jUioMarian Csontos <mcsontos@redhat.com> - 0.8.2-1\@- Fix tools requiring additional --repair option.zTi
Marian Csontos <mcsontos@redhat.com> - 0.8.1-1\~- Update to latest upstream release including various bug fixes.nSiwMarian Csontos <mcsontos@redhat.com> - 0.7.3-3Z
- Fix version 2 metadata corruption in cache_restore.bRi_Marian Csontos <mcsontos@redhat.com> - 0.7.3-2Yܶ@- Rebuilding with updated source tarball.SQi?Marian Csontos <mcsontos@redhat.com> - 0.7.3-1Yp@- Update to latest bugfix and documentation update release.
- *_restore tools wipe superblock as a last resort.
- Add thin_check --override-mapping-root.
) v ) `kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk_koPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]?- Resolves: #1756850 - Close FD in noreplay mode{^k
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S- Detect time shifts to prevent ip address expiration (#1093803)u]kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\@- Resolves: #1712414 - Reset signal handlers set by isclib \kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase[kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up eventsXZy;Marian Csontos <mcsontos@redhat.com> - 0.8.5-3.el7_9.2_h- Rebuild for Z stream.YyMarian Csontos <mcsontos@redhat.com> - 0.8.5-3.el7_9.1_a@- Underpopulated nodes are considered non fatal error by thin_check.
-w{ khkoPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]?- Resolves: #1756850 - Close FD in noreplay mode{gk
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S- Detect time shifts to prevent ip address expiration (#1093803)ufkPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\@- Resolves: #1712414 - Reset signal handlers set by isclib ekPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase\d}?CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`@- Roll in CentOS BrandingTco=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`- Fix for CVE-2021-25217Rbk=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE- Revert fix for 1668696{ak
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode
m |Rw m pkPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebaseokPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events\n}?CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.2ff- Roll in CentOS Brandingymi Stepan Broz <sbroz@redhat.com> - 12:4.2.5-83.2fM@- Rebuild because of bind ABI changes related to CVE-2023-50387Tlo=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`- Fix for CVE-2021-25217Rkk=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE- Revert fix for 1668696{jk
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode ikPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects
E \x}?CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`@- Roll in CentOS BrandingTwo=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`- Fix for CVE-2021-25217Rvk=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE- Revert fix for 1668696{uk
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode tkPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectskskoPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]?- Resolves: #1756850 - Close FD in noreplay mode{rk
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S- Detect time shifts to prevent ip address expiration (#1093803)uqkPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\@- Resolves: #1712414 - Reset signal handlers set by isclib
j | j T o=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`- Fix for CVE-2021-25217Rk=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE- Revert fix for 1668696{~k
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode }kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk|koPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]?- Resolves: #1756850 - Close FD in noreplay mode{{k
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S- Detect time shifts to prevent ip address expiration (#1093803)uzkPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\@- Resolves: #1712414 - Reset signal handlers set by isclib ykPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase
3 %% 3 kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectskkoPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]?- Resolves: #1756850 - Close FD in noreplay mode{k
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S- Detect time shifts to prevent ip address expiration (#1093803)ukPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\@- Resolves: #1712414 - Reset signal handlers set by isclib kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebasekPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events\}?CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.2ff- Roll in CentOS Brandingyi Stepan Broz <sbroz@redhat.com> - 12:4.2.5-83.2fM@- Rebuild because of bind ABI changes related to CVE-2023-50387
-w{ kkoPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]?- Resolves: #1756850 - Close FD in noreplay mode{k
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S- Detect time shifts to prevent ip address expiration (#1093803)ukPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\@- Resolves: #1712414 - Reset signal handlers set by isclib
kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase\ }?CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`@- Roll in CentOS BrandingT o=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`- Fix for CVE-2021-25217R
k=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE- Revert fix for 1668696{ k
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode
m |Rw m kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebasekPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events\}?CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.2ff- Roll in CentOS Brandingyi Stepan Broz <sbroz@redhat.com> - 12:4.2.5-83.2fM@- Rebuild because of bind ABI changes related to CVE-2023-50387To=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`- Fix for CVE-2021-25217Rk=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE- Revert fix for 1668696{k
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects
E \ }?CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`@- Roll in CentOS BrandingT o=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`- Fix for CVE-2021-25217R k=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE- Revert fix for 1668696{ k
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectskkoPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]?- Resolves: #1756850 - Close FD in noreplay mode{k
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S- Detect time shifts to prevent ip address expiration (#1093803)ukPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\@- Resolves: #1712414 - Reset signal handlers set by isclib
; z~ ; R(k=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE- Revert fix for 1668696{'k
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode &kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk%koPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]?- Resolves: #1756850 - Close FD in noreplay mode{$k
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S- Detect time shifts to prevent ip address expiration (#1093803)u#kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\@- Resolves: #1712414 - Reset signal handlers set by isclib "kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase!kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events
` JNb ` {0k
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode /kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk.koPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]?- Resolves: #1756850 - Close FD in noreplay mode{-k
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S- Detect time shifts to prevent ip address expiration (#1093803)u,kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\@- Resolves: #1712414 - Reset signal handlers set by isclib +kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase\*}?CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`@- Roll in CentOS BrandingT)o=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`- Fix for CVE-2021-25217
Ty} k8koPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]?- Resolves: #1756850 - Close FD in noreplay mode{7k
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S- Detect time shifts to prevent ip address expiration (#1093803)u6kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\@- Resolves: #1712414 - Reset signal handlers set by isclib 5kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase\4}?CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.2ff- Roll in CentOS Brandingy3i Stepan Broz <sbroz@redhat.com> - 12:4.2.5-83.2fM@- Rebuild because of bind ABI changes related to CVE-2023-50387T2o=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`- Fix for CVE-2021-25217R1k=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE- Revert fix for 1668696
m |Rw m @kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase?kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events\>}?CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.2ff- Roll in CentOS Brandingy=i Stepan Broz <sbroz@redhat.com> - 12:4.2.5-83.2fM@- Rebuild because of bind ABI changes related to CVE-2023-50387T<o=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`- Fix for CVE-2021-25217R;k=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE- Revert fix for 1668696{:k
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode 9kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects
E \H}?CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`@- Roll in CentOS BrandingTGo=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`- Fix for CVE-2021-25217RFk=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE- Revert fix for 1668696{Ek
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode DkPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectskCkoPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]?- Resolves: #1756850 - Close FD in noreplay mode{Bk
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S- Detect time shifts to prevent ip address expiration (#1093803)uAkPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\@- Resolves: #1712414 - Reset signal handlers set by isclib
e r+V: e Da
419a628252f2a83438fabbadf25cbc862ef23160a9a3d32fa110f61a1f1f3930D`
3989ac4ab63df7b51e1ce010e2b0d2368a33f915f06ae6b659dd6861d3dc3721D_
49a6803a256d5206d45f93d9583e7333cd4961a731881b7a82c761bb7ea7c9abD^
912ce11b5c1438a25af1e1961d891e6421717a57685de5add6d528d3ff3bdf42D]
1e0e7cf67ede91280fd5a1d1a63490ea597c590a44d12ba3e9d2c08a05b703c1D\
a9ba907298e679306020035cb1d25f9afc4e33153f8395fbcfb0ce1578791a93D[
bbf2b7054c85cc8831c0ffba64a4cabdc3eb23c4d32ba5484b962d4c8f22ecdeDZ
7b812c97766f36c2e477c31f7c5cfaabf34e7bfaf746d34a7f6971d6abc3e95cDY
3b822a517d29541cd78da3a94ca8b9ce8095283d799bf7d7ebe96461744ae90dDX
eac7d9685870a65836a4ca60f270d56cb0278fbdcef6be718d7aae558eeab78dDW
a29e2e0a13cced40434f89b37fa93d3caf9d4d7726df5a200015fd9c03f045f6DV
5784610bb7a7b03cfd4ed995bd2f9d4785cdbc6dd40713274e6f1ae158558f20DU
4bfbeb71cf3639c4f6067ddf6c491f06976bc93d091646bb825481dd641a719f
; z~ ; RPk=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE- Revert fix for 1668696{Ok
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode NkPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectskMkoPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]?- Resolves: #1756850 - Close FD in noreplay mode{Lk
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S- Detect time shifts to prevent ip address expiration (#1093803)uKkPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\@- Resolves: #1712414 - Reset signal handlers set by isclib JkPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebaseIkPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events
` JNb ` {Xk
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode WkPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectskVkoPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]?- Resolves: #1756850 - Close FD in noreplay mode{Uk
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S- Detect time shifts to prevent ip address expiration (#1093803)uTkPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\@- Resolves: #1712414 - Reset signal handlers set by isclib SkPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase\R}?CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`@- Roll in CentOS BrandingTQo=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`- Fix for CVE-2021-25217
Ty} k`koPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]?- Resolves: #1756850 - Close FD in noreplay mode{_k
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S- Detect time shifts to prevent ip address expiration (#1093803)u^kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\@- Resolves: #1712414 - Reset signal handlers set by isclib ]kPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase\\}?CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.2ff- Roll in CentOS Brandingy[i Stepan Broz <sbroz@redhat.com> - 12:4.2.5-83.2fM@- Rebuild because of bind ABI changes related to CVE-2023-50387TZo=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`- Fix for CVE-2021-25217RYk=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE- Revert fix for 1668696
|Rw chUuTim Waugh <twaugh@redhat.com> 3.2-11P{@- Ported i18n patch and reinstated it (bug #870460).]gUiTim Waugh <twaugh@redhat.com> 3.2-10PY- Fixed license as current source says GPLv3+.\f}?CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.2ff- Roll in CentOS Brandingyei Stepan Broz <sbroz@redhat.com> - 12:4.2.5-83.2fM@- Rebuild because of bind ABI changes related to CVE-2023-50387Tdo=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`- Fix for CVE-2021-25217Rck=Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE- Revert fix for 1668696{bk
Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode akPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects
C gQY C crUuTim Waugh <twaugh@redhat.com> 3.2-11P{@- Ported i18n patch and reinstated it (bug #870460).]qUiTim Waugh <twaugh@redhat.com> 3.2-10PY- Fixed license as current source says GPLv3+.MpQMThan Ngo <than@redhat.com> - 3.3-6c@- Resolves: #2152980, regression[oQiThan Ngo <than@redhat.com> - 3.3-5[H- Resolves: #1611281, diff -y produces garbageJnY?Daniel Mach <dmach@redhat.com> - 3.3-4RU- Mass rebuild 2014-01-24JmY?Daniel Mach <dmach@redhat.com> - 3.3-3Rk- Mass rebuild 2013-12-27klSTim Waugh <twaugh@redhat.com> 3.3-2Rg@- Fixed multibyte handling logic for diff -Z (bug #1022417).BkS5Tim Waugh <twaugh@redhat.com> 3.3-1QQ- 3.3 (bug #927560).`jUoTim Waugh <twaugh@redhat.com> 3.2-13Q']- Fixed i18n handling of 'diff -E' (bug #914666).iFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.2-12Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
1 gQY 1 e|YuPetr Oros <poros@redhat.com> - 1:3.0-3X!@- Hide irrelevant fixup message
- Resolves: #1384195m{YPetr Oros <poros@redhat.com> - 1:3.0-2Ws@- Unmask LRDIMM in memmory type detail
- Resolves: #1321342MzQMThan Ngo <than@redhat.com> - 3.3-6c@- Resolves: #2152980, regression[yQiThan Ngo <than@redhat.com> - 3.3-5[H- Resolves: #1611281, diff -y produces garbageJxY?Daniel Mach <dmach@redhat.com> - 3.3-4RU- Mass rebuild 2014-01-24JwY?Daniel Mach <dmach@redhat.com> - 3.3-3Rk- Mass rebuild 2013-12-27kvSTim Waugh <twaugh@redhat.com> 3.3-2Rg@- Fixed multibyte handling logic for diff -Z (bug #1022417).BuS5Tim Waugh <twaugh@redhat.com> 3.3-1QQ- 3.3 (bug #927560).`tUoTim Waugh <twaugh@redhat.com> 3.2-13Q']- Fixed i18n handling of 'diff -E' (bug #914666).sFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.2-12Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
q .^ q cMLianbo Jiang <lijiang@redhat.com> - 1:3.2-5^@- Revert this patch("Use larger units for memory device and BIOS size")
- Resolves: rhbz#1767323<cLianbo Jiang <lijiang@redhat.com> - 1:3.2-4^r
@- Fix System Slot Information for PCIe SSD
- Resolves: rhbz#1793900
- Sync with upstream(commit:62bce59fed1)
- Resolves: rhbz#1767323c;Lianbo Jiang <lijiang@redhat.com> - 1:3.2-3\- Add "Logical non-volatile device" to the memory device types
- Resolves: rhbz#1664921g coLianbo Jiang <lijiang@redhat.com> - 1:3.2-1[@- Sync with upstream 3.2
- Resolves: rhbz#1628992ccgLianbo Jiang <lijiang@redhat.com> - 1:3.1-1Z@- Sync with upstream
- Resolves: rhbz#1568227r~Y
Petr Oros <poros@redhat.com> - 1:3.0-5Y @- Update compiler flags for hardened builds
- Resolves: #1420763Z}Y_Petr Oros <poros@redhat.com> - 1:3.0-4Xf@- Sync with upstream
- Resolves: #1385884
O o0 O s gPetr Menšík <pemensik@redhat.com> - 2.76-14^@- Stop treating SERVFAIL as successful response (#1815080)h
gmPetr Menšík <pemensik@redhat.com> - 2.76-13^^F- Do not ignore DHCPv6 relay messages (#1757247)e ggPetr Menšík <pemensik@redhat.com> - 2.76-12^\@- Fix memory leak in create_helper (#1795369)gPetr Menšík <pemensik@redhat.com> - 2.76-11]@- Send dhcp_release even for addresses not on local network (#1752569)og{Petr Menšík <pemensik@redhat.com> - 2.76-10] - Fix TCP queries after interface recreation (#1721668)ieqPetr Menšík <pemensik@redhat.com> - 2.79-9\@- Fix passing of dnssec enabled queries (#1638703)tePetr Menšík <pemensik@redhat.com> - 2.76-8\@- Stop using privileged port for outbound queries (#1614331)
g5Lianbo Jiang <lijiang@redhat.com> - 1:3.2-5.1_@- Fix the "OUT OF SPEC" error for empty NVMe and DIMM slots
- Resolves: rhbz#1858345
v { eggPetr Menšík <pemensik@redhat.com> - 2.76-12^\@- Fix memory leak in create_helper (#1795369)gPetr Menšík <pemensik@redhat.com> - 2.76-11]@- Send dhcp_release even for addresses not on local network (#1752569)og{Petr Menšík <pemensik@redhat.com> - 2.76-10] - Fix TCP queries after interface recreation (#1721668)ieqPetr Menšík <pemensik@redhat.com> - 2.79-9\@- Fix passing of dnssec enabled queries (#1638703)!kYPetr Menšík <pemensik@redhat.com> - 2.76-16.1_@- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementationg
gkPetr Menšík <pemensik@redhat.com> - 2.76-16^@- Fix strict-mode retries on REFUSED (#1755610) g'Petr Menšík <pemensik@redhat.com> - 2.76-15^@- Forward non-recursive queries to upstream, but serve local names (#1755610)
+ }kPetr Menšík <pemensik@redhat.com> - 2.76-17.1`% @- Fix occasional failures in netlink on many interfaces (#1887649)!kYPetr Menšík <pemensik@redhat.com> - 2.76-16.1_@- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementationggkPetr Menšík <pemensik@redhat.com> - 2.76-16^@- Fix strict-mode retries on REFUSED (#1755610)g'Petr Menšík <pemensik@redhat.com> - 2.76-15^@- Forward non-recursive queries to upstream, but serve local names (#1755610)sgPetr Menšík <pemensik@redhat.com> - 2.76-14^@- Stop treating SERVFAIL as successful response (#1815080)hgmPetr Menšík <pemensik@redhat.com> - 2.76-13^^F- Do not ignore DHCPv6 relay messages (#1757247)
~5A ! kYPetr Menšík <pemensik@redhat.com> - 2.76-16.1_@- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementationg gkPetr Menšík <pemensik@redhat.com> - 2.76-16^@- Fix strict-mode retries on REFUSED (#1755610) g'Petr Menšík <pemensik@redhat.com> - 2.76-15^@- Forward non-recursive queries to upstream, but serve local names (#1755610)s gPetr Menšík <pemensik@redhat.com> - 2.76-14^@- Stop treating SERVFAIL as successful response (#1815080)hgmPetr Menšík <pemensik@redhat.com> - 2.76-13^^F- Do not ignore DHCPv6 relay messages (#1757247)eggPetr Menšík <pemensik@redhat.com> - 2.76-12^\@- Fix memory leak in create_helper (#1795369)gPetr Menšík <pemensik@redhat.com> - 2.76-11]@- Send dhcp_release even for addresses not on local network (#1752569)
V @ V e'ggPetr Menšík <pemensik@redhat.com> - 2.76-12^\@- Fix memory leak in create_helper (#1795369)&gPetr Menšík <pemensik@redhat.com> - 2.76-11]@- Send dhcp_release even for addresses not on local network (#1752569)o%g{Petr Menšík <pemensik@redhat.com> - 2.76-10] - Fix TCP queries after interface recreation (#1721668)i$eqPetr Menšík <pemensik@redhat.com> - 2.79-9\@- Fix passing of dnssec enabled queries (#1638703)t#ePetr Menšík <pemensik@redhat.com> - 2.76-8\@- Stop using privileged port for outbound queries (#1614331)n"kuPetr Menšík <pemensik@redhat.com> - 2.76-17.3`B @- Accept replies from bound sockets again (#1923913)w!kPetr Menšík <pemensik@redhat.com> - 2.76-17.2`<@- Correct two regressions introduced by CVE fixes (#1923913)} kPetr Menšík <pemensik@redhat.com> - 2.76-17.1`% @- Fix occasional failures in netlink on many interfaces (#1887649)
( + ( o.g{Petr Menšík <pemensik@redhat.com> - 2.76-10] - Fix TCP queries after interface recreation (#1721668)i-eqPetr Menšík <pemensik@redhat.com> - 2.79-9\@- Fix passing of dnssec enabled queries (#1638703)!,kYPetr Menšík <pemensik@redhat.com> - 2.76-16.1_@- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementationg+gkPetr Menšík <pemensik@redhat.com> - 2.76-16^@- Fix strict-mode retries on REFUSED (#1755610)*g'Petr Menšík <pemensik@redhat.com> - 2.76-15^@- Forward non-recursive queries to upstream, but serve local names (#1755610)s)gPetr Menšík <pemensik@redhat.com> - 2.76-14^@- Stop treating SERVFAIL as successful response (#1815080)h(gmPetr Menšík <pemensik@redhat.com> - 2.76-13^^F- Do not ignore DHCPv6 relay messages (#1757247)
~5A !5kYPetr Menšík <pemensik@redhat.com> - 2.76-16.1_@- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementationg4gkPetr Menšík <pemensik@redhat.com> - 2.76-16^@- Fix strict-mode retries on REFUSED (#1755610)3g'Petr Menšík <pemensik@redhat.com> - 2.76-15^@- Forward non-recursive queries to upstream, but serve local names (#1755610)s2gPetr Menšík <pemensik@redhat.com> - 2.76-14^@- Stop treating SERVFAIL as successful response (#1815080)h1gmPetr Menšík <pemensik@redhat.com> - 2.76-13^^F- Do not ignore DHCPv6 relay messages (#1757247)e0ggPetr Menšík <pemensik@redhat.com> - 2.76-12^\@- Fix memory leak in create_helper (#1795369)/gPetr Menšík <pemensik@redhat.com> - 2.76-11]@- Send dhcp_release even for addresses not on local network (#1752569)
++ g<gkPetr Menšík <pemensik@redhat.com> - 2.76-16^@- Fix strict-mode retries on REFUSED (#1755610);g'Petr Menšík <pemensik@redhat.com> - 2.76-15^@- Forward non-recursive queries to upstream, but serve local names (#1755610)s:gPetr Menšík <pemensik@redhat.com> - 2.76-14^@- Stop treating SERVFAIL as successful response (#1815080)h9gmPetr Menšík <pemensik@redhat.com> - 2.76-13^^F- Do not ignore DHCPv6 relay messages (#1757247)e8ggPetr Menšík <pemensik@redhat.com> - 2.76-12^\@- Fix memory leak in create_helper (#1795369)7gPetr Menšík <pemensik@redhat.com> - 2.76-11]@- Send dhcp_release even for addresses not on local network (#1752569)}6kPetr Menšík <pemensik@redhat.com> - 2.76-17.1`% @- Fix occasional failures in netlink on many interfaces (#1887649)
X [p X B'Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.12-0.29.pre5P@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildtAmKamil Dudka <kdudka@redhat.com> - 0.12-0.28.pre5OY- do not crash if add_heartbeat() returned NULL (#798103)n@kuPetr Menšík <pemensik@redhat.com> - 2.76-17.3`B @- Accept replies from bound sockets again (#1923913)w?kPetr Menšík <pemensik@redhat.com> - 2.76-17.2`<@- Correct two regressions introduced by CVE fixes (#1923913)}>kPetr Menšík <pemensik@redhat.com> - 2.76-17.1`% @- Fix occasional failures in netlink on many interfaces (#1887649)!=kYPetr Menšík <pemensik@redhat.com> - 2.76-16.1_@- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation
{ ' { SIk?Daniel Mach <dmach@redhat.com> - 0.12-0.36.pre6RU- Mass rebuild 2014-01-24SHk?Daniel Mach <dmach@redhat.com> - 0.12-0.35.pre6Rk- Mass rebuild 2013-12-27AGmKamil Dudka <kdudka@redhat.com> - 0.12-0.34.pre6Q+R@- update to latest upstream pre-release
- drop unneeded patches
- fix autoconf warnings
- explicitly disable using OpenSSL and GnuTLS F'Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.12-0.33.pre5Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildoEmuKamil Dudka <kdudka@redhat.com> - 0.12-0.32.pre5P@- do not delegate GSSAPI credentials (CVE-2012-4545)Dm Kamil Dudka <kdudka@redhat.com> - 0.12-0.31.pre5Pr@- add default "ddg" dumb/smart rewrite prefixes for DuckDuckGo (#856348)vCmKamil Dudka <kdudka@redhat.com> - 0.12-0.30.pre5P<- fix specfile issues reported by the fedora-review script
lPkqJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y@- fix unsafe enriched mode translations (#1490451)OkJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)iNeqPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary
- Related: #1223033Me;Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033Le=Petr Hracek <phracek@redhat.com> - 1:24.3-16U- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033sKePetr Hracek <phracek@redhat.com> - 1:24.3-15U@- Updated texts in patch and SPEC file
- Resolves: #1223033hJmgKamil Dudka <kdudka@redhat.com> - 0.12-0.37.pre6Y- Rebuilt for js 48-bit VA support (#1439479)
e r+V: e Dn
7174a32cc247b70e650aa36730fa976b5d7e498a9fc59fde5c06de3be20d8da3Dm
e9ee7e077912afbee46d9de1440f905a3150a783ca98d2999145e7f0d4946b00Dl
cdc630a6947d25b54a576be1d51170f8ca7a920b446adaa54aece61b239e798dDk
91fc50b78a1f5d50c4f2a592996c690be37c4d7e9724a2dbd625eba57e9d607bDj
2847971791401757255fc2092497c37efa1f8f7440c3ce7fc60b243b497e8094Di
69714123fc4f27b58c1e15a2bdfef799961c0c2c3f1398116a458d05cf87f618Dh
2d55f68e1a5fb1da8eb138aca00951f0f028a8f3db6a4427488b57f1c043891eDg
67dc839e667e3f5b861596b011039393d6a243f7dfb880c5c787ed72ab1e601fDf
72415fc89f5dcb558370bd92e670638fc9add9ad19ba4ee77ef546520c9a9e39De
f2136014ff193c8527ea2351651b413e5c8cb5eeb1687c98dd2e6d544c6813bdDd
81d6abea697da32a4834b6bbe7be764845468cc2ee8e089861fd0eb80c2466c6Dc
a547520b96904888041cdae1529c93057c845c1215a8ac1a453c516eae9263a6Db
decf2a313c4d562a043eed4b9202d10b5c58750490b4d6db6e70c5a2bf2fe794
/< Ve=Petr Hracek <phracek@redhat.com> - 1:24.3-16U- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033sUePetr Hracek <phracek@redhat.com> - 1:24.3-15U@- Updated texts in patch and SPEC file
- Resolves: #1223033zTk Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0- Fix htmlfontify.el command injection vulnerability (#2175177)aSccTomas Pelka <tpelka@redhat.com> - 1:24.3-23] @- Resolves: #1765208 rebuild against new IM}RkJan Synáček <jsynacek@redhat.com> - 1:24.3-22[@- refix: TLS certificate warnings should be hard errors (#1403643)iQkiJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)
< m|
< a]ccTomas Pelka <tpelka@redhat.com> - 1:24.3-23] @- Resolves: #1765208 rebuild against new IM}\kJan Synáček <jsynacek@redhat.com> - 1:24.3-22[@- refix: TLS certificate warnings should be hard errors (#1403643)i[kiJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)lZkqJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y@- fix unsafe enriched mode translations (#1490451)YkJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)iXeqPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary
- Related: #1223033We;Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033
yz ldkqJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y@- fix unsafe enriched mode translations (#1490451)ckJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)ibeqPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary
- Related: #1223033ae;Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033`e=Petr Hracek <phracek@redhat.com> - 1:24.3-16U- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033s_ePetr Hracek <phracek@redhat.com> - 1:24.3-15U@- Updated texts in patch and SPEC file
- Resolves: #1223033z^k Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0- Fix htmlfontify.el command injection vulnerability (#2175177)
/< je=Petr Hracek <phracek@redhat.com> - 1:24.3-16U- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033siePetr Hracek <phracek@redhat.com> - 1:24.3-15U@- Updated texts in patch and SPEC file
- Resolves: #1223033zhk Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0- Fix htmlfontify.el command injection vulnerability (#2175177)agccTomas Pelka <tpelka@redhat.com> - 1:24.3-23] @- Resolves: #1765208 rebuild against new IM}fkJan Synáček <jsynacek@redhat.com> - 1:24.3-22[@- refix: TLS certificate warnings should be hard errors (#1403643)iekiJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)
< m|
< aqccTomas Pelka <tpelka@redhat.com> - 1:24.3-23] @- Resolves: #1765208 rebuild against new IM}pkJan Synáček <jsynacek@redhat.com> - 1:24.3-22[@- refix: TLS certificate warnings should be hard errors (#1403643)iokiJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)lnkqJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y@- fix unsafe enriched mode translations (#1490451)mkJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)ileqPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary
- Related: #1223033ke;Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033
5tq{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.[sqGSebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(@- move instaweb to separate git-instaweb subpackage.
Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
Resolves: #1284081zrk Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0- Fix htmlfontify.el command injection vulnerability (#2175177)
u T u xi)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1Owq/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059 viQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.ui)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.
l Kl |{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067:{k Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008zu=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601yuoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387
G; iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.~i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.5}q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all. of flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| G H K P X ` h p x ( 0 8 @ H P X ` h r | ' . 5 < B I P V ] d j q t x | & - 4 ; C K R Y a ºi úp ĺw ź ƻ ǻ Ȼ ɻ ʻ" ˻* ̻1 ͻ8 λ> ϻC лI ѻP ӻV Ի] ջd ֻj q ػx ٻ~ ڻ ۼ ܼ ݼ " & ' - 0 1 8 9 : @ C D J N O U
-!l :k Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008u=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601uoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1O q/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059
X { X 5q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.[qGSebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(@- move instaweb to separate git-instaweb subpackage.
Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
Resolves: #1284081s Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067
u T u i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1O q/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059
iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well. i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.
l Kl { Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067:k Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008u=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601
uoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387
G; iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.5q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.
-!l :k Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008u=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601uoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1Oq/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059
b {zS b kJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)i eqPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary
- Related: #1223033 e;Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033 e=Petr Hracek <phracek@redhat.com> - 1:24.3-16U- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033sePetr Hracek <phracek@redhat.com> - 1:24.3-15U@- Updated texts in patch and SPEC file
- Resolves: #1223033s Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067
9 $C 9 &e=Petr Hracek <phracek@redhat.com> - 1:24.3-16U- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033s%ePetr Hracek <phracek@redhat.com> - 1:24.3-15U@- Updated texts in patch and SPEC file
- Resolves: #1223033z$k Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0- Fix htmlfontify.el command injection vulnerability (#2175177)a#ccTomas Pelka <tpelka@redhat.com> - 1:24.3-23] @- Resolves: #1765208 rebuild against new IM}"kJan Synáček <jsynacek@redhat.com> - 1:24.3-22[@- refix: TLS certificate warnings should be hard errors (#1403643)i!kiJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)l kqJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y@- fix unsafe enriched mode translations (#1490451)
< m|
< a-ccTomas Pelka <tpelka@redhat.com> - 1:24.3-23] @- Resolves: #1765208 rebuild against new IM},kJan Synáček <jsynacek@redhat.com> - 1:24.3-22[@- refix: TLS certificate warnings should be hard errors (#1403643)i+kiJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)l*kqJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y@- fix unsafe enriched mode translations (#1490451))kJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)i(eqPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary
- Related: #1223033'e;Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033
QH }4] Milan Crha <mcrha@redhat.com> - 3.28.5-2\T4- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E3]1Milan Crha <mcrha@redhat.com> - 3.28.5-1[^- Update to 3.28.5|2] Milan Crha <mcrha@redhat.com> - 3.28.4-1[L- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)1]1Milan Crha <mcrha@redhat.com> - 3.28.3-2[(@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|0] Milan Crha <mcrha@redhat.com> - 3.28.3-1['- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)//]Milan Crha <mcrha@redhat.com> - 3.28.2-1[@- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495z.k Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0- Fix htmlfontify.el command injection vulnerability (#2175177)
^ | g ^ ;]1Milan Crha <mcrha@redhat.com> - 3.28.3-2[(@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|:] Milan Crha <mcrha@redhat.com> - 3.28.3-1['- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)/9]Milan Crha <mcrha@redhat.com> - 3.28.2-1[@- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495t8a Milan Crha <mcrha@redhat.com> - 3.28.5-5.1bs@- Resolves: #2081786 (Backport patch for Google OAuth2 change)l7]Milan Crha <mcrha@redhat.com> - 3.28.5-5^@- Resolves: #1772103 (EDBusServer: Delay new module load)y6]Milan Crha <mcrha@redhat.com> - 3.28.5-4]S- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762) 5]%Milan Crha <mcrha@redhat.com> - 3.28.5-3\@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)
95J /C]Milan Crha <mcrha@redhat.com> - 3.28.2-1[@- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495tBa Milan Crha <mcrha@redhat.com> - 3.28.5-5.1bs@- Resolves: #2081786 (Backport patch for Google OAuth2 change)lA]Milan Crha <mcrha@redhat.com> - 3.28.5-5^@- Resolves: #1772103 (EDBusServer: Delay new module load)y@]Milan Crha <mcrha@redhat.com> - 3.28.5-4]S- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762) ?]%Milan Crha <mcrha@redhat.com> - 3.28.5-3\@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)}>] Milan Crha <mcrha@redhat.com> - 3.28.5-2\T4- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E=]1Milan Crha <mcrha@redhat.com> - 3.28.5-1[^- Update to 3.28.5|<] Milan Crha <mcrha@redhat.com> - 3.28.4-1[L- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)
A x0, A lK]Milan Crha <mcrha@redhat.com> - 3.28.5-5^@- Resolves: #1772103 (EDBusServer: Delay new module load)yJ]Milan Crha <mcrha@redhat.com> - 3.28.5-4]S- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762) I]%Milan Crha <mcrha@redhat.com> - 3.28.5-3\@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)}H] Milan Crha <mcrha@redhat.com> - 3.28.5-2\T4- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)EG]1Milan Crha <mcrha@redhat.com> - 3.28.5-1[^- Update to 3.28.5|F] Milan Crha <mcrha@redhat.com> - 3.28.4-1[L- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)E]1Milan Crha <mcrha@redhat.com> - 3.28.3-2[(@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|D] Milan Crha <mcrha@redhat.com> - 3.28.3-1['- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)
WN }R] Milan Crha <mcrha@redhat.com> - 3.28.5-2\T4- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)EQ]1Milan Crha <mcrha@redhat.com> - 3.28.5-1[^- Update to 3.28.5|P] Milan Crha <mcrha@redhat.com> - 3.28.4-1[L- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)O]1Milan Crha <mcrha@redhat.com> - 3.28.3-2[(@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|N] Milan Crha <mcrha@redhat.com> - 3.28.3-1['- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)/M]Milan Crha <mcrha@redhat.com> - 3.28.2-1[@- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495tLa Milan Crha <mcrha@redhat.com> - 3.28.5-5.1bs@- Resolves: #2081786 (Backport patch for Google OAuth2 change)
e r+V: e D{
4402a7fcf865ee506196d91c722ec2875470f134b63f3912ac69561ba10e5113Dz
18defd29c31366e3f3fc7602eed4307dcdd1028a8e25fd6823379fa2ef33eb6bDy
d219bddd9ca9b61182ef38132b073da37b5c7b6727fe9ef79c35acfe7e1aca0eDx
a52fbf59e2e7f8b7b912ee6fd5be7c84450b3ab1d4cb68690cfc3f306086b817Dw
a919c9e3a766f98e15edfc8dde8b699f46753980aaf8f4b46d2831fcc01cf9b7Dv
369ac51f105f8b0b9fb343deb57c8ed97f3e08bbb535d683866ddfd47b058675Du
1b57cc987d64b98efbaa6f796a3df838d4f4cc4a2b892e4e19685ea37ea8188dDt
284e903527e4376ba342697bff7afdcf76804823b3344908e0ad3589efb08d0eDs
a56dd9d75f85b76dd72f232aef6262710e4f66d7291c55f0e3467fa4c70855eeDr
006866668980a661dabcff054750dcfabee9be838cbdbe8f6554a12c8d2437e4Dq
1d2c5ccf5a54793d996b971ad4448b1d95a72bf1270703b1cdd944b0b4a82932Dp
98fa7e7c32572003a415282278a680123f7896108aa35e2ddad608cf9a8bf1b6Do
d057cb97f19e0b7a6e8769b9407b59d09edac0f8548ba4137a65575461013ea6
^ | g ^ Y]1Milan Crha <mcrha@redhat.com> - 3.28.3-2[(@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|X] Milan Crha <mcrha@redhat.com> - 3.28.3-1['- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)/W]Milan Crha <mcrha@redhat.com> - 3.28.2-1[@- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495tVa Milan Crha <mcrha@redhat.com> - 3.28.5-5.1bs@- Resolves: #2081786 (Backport patch for Google OAuth2 change)lU]Milan Crha <mcrha@redhat.com> - 3.28.5-5^@- Resolves: #1772103 (EDBusServer: Delay new module load)yT]Milan Crha <mcrha@redhat.com> - 3.28.5-4]S- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762) S]%Milan Crha <mcrha@redhat.com> - 3.28.5-3\@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)
95J /a]Milan Crha <mcrha@redhat.com> - 3.28.2-1[@- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495t`a Milan Crha <mcrha@redhat.com> - 3.28.5-5.1bs@- Resolves: #2081786 (Backport patch for Google OAuth2 change)l_]Milan Crha <mcrha@redhat.com> - 3.28.5-5^@- Resolves: #1772103 (EDBusServer: Delay new module load)y^]Milan Crha <mcrha@redhat.com> - 3.28.5-4]S- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762) ]]%Milan Crha <mcrha@redhat.com> - 3.28.5-3\@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)}\] Milan Crha <mcrha@redhat.com> - 3.28.5-2\T4- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E[]1Milan Crha <mcrha@redhat.com> - 3.28.5-1[^- Update to 3.28.5|Z] Milan Crha <mcrha@redhat.com> - 3.28.4-1[L- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)
A x0, A li]Milan Crha <mcrha@redhat.com> - 3.28.5-5^@- Resolves: #1772103 (EDBusServer: Delay new module load)yh]Milan Crha <mcrha@redhat.com> - 3.28.5-4]S- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762) g]%Milan Crha <mcrha@redhat.com> - 3.28.5-3\@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)}f] Milan Crha <mcrha@redhat.com> - 3.28.5-2\T4- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)Ee]1Milan Crha <mcrha@redhat.com> - 3.28.5-1[^- Update to 3.28.5|d] Milan Crha <mcrha@redhat.com> - 3.28.4-1[L- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)c]1Milan Crha <mcrha@redhat.com> - 3.28.3-2[(@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|b] Milan Crha <mcrha@redhat.com> - 3.28.3-1['- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)
WN }p] Milan Crha <mcrha@redhat.com> - 3.28.5-2\T4- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)Eo]1Milan Crha <mcrha@redhat.com> - 3.28.5-1[^- Update to 3.28.5|n] Milan Crha <mcrha@redhat.com> - 3.28.4-1[L- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)m]1Milan Crha <mcrha@redhat.com> - 3.28.3-2[(@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|l] Milan Crha <mcrha@redhat.com> - 3.28.3-1['- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)/k]Milan Crha <mcrha@redhat.com> - 3.28.2-1[@- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495tja Milan Crha <mcrha@redhat.com> - 3.28.5-5.1bs@- Resolves: #2081786 (Backport patch for Google OAuth2 change)
^ | g ^ w]1Milan Crha <mcrha@redhat.com> - 3.28.3-2[(@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|v] Milan Crha <mcrha@redhat.com> - 3.28.3-1['- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)/u]Milan Crha <mcrha@redhat.com> - 3.28.2-1[@- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495tta Milan Crha <mcrha@redhat.com> - 3.28.5-5.1bs@- Resolves: #2081786 (Backport patch for Google OAuth2 change)ls]Milan Crha <mcrha@redhat.com> - 3.28.5-5^@- Resolves: #1772103 (EDBusServer: Delay new module load)yr]Milan Crha <mcrha@redhat.com> - 3.28.5-4]S- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762) q]%Milan Crha <mcrha@redhat.com> - 3.28.5-3\@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)
95J /]Milan Crha <mcrha@redhat.com> - 3.28.2-1[@- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495t~a Milan Crha <mcrha@redhat.com> - 3.28.5-5.1bs@- Resolves: #2081786 (Backport patch for Google OAuth2 change)l}]Milan Crha <mcrha@redhat.com> - 3.28.5-5^@- Resolves: #1772103 (EDBusServer: Delay new module load)y|]Milan Crha <mcrha@redhat.com> - 3.28.5-4]S- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762) {]%Milan Crha <mcrha@redhat.com> - 3.28.5-3\@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)}z] Milan Crha <mcrha@redhat.com> - 3.28.5-2\T4- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)Ey]1Milan Crha <mcrha@redhat.com> - 3.28.5-1[^- Update to 3.28.5|x] Milan Crha <mcrha@redhat.com> - 3.28.4-1[L- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)
A x0, A l]Milan Crha <mcrha@redhat.com> - 3.28.5-5^@- Resolves: #1772103 (EDBusServer: Delay new module load)y]Milan Crha <mcrha@redhat.com> - 3.28.5-4]S- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762) ]%Milan Crha <mcrha@redhat.com> - 3.28.5-3\@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)}] Milan Crha <mcrha@redhat.com> - 3.28.5-2\T4- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E]1Milan Crha <mcrha@redhat.com> - 3.28.5-1[^- Update to 3.28.5|] Milan Crha <mcrha@redhat.com> - 3.28.4-1[L- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)]1Milan Crha <mcrha@redhat.com> - 3.28.3-2[(@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)| ] Milan Crha <mcrha@redhat.com> - 3.28.3-1['- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)
@ y1 @ X]UMilan Crha <mcrha@redhat.com> - 3.28.5-4]@- Add patch for RH bug #1392567 (Sync CategoryList with mail Labels)
- Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)
]5Milan Crha <mcrha@redhat.com> - 3.28.5-3]S- Add patch for RH bug #1696760 (CVE-2019-3890 - SSL Certificates are not validated) ]/Milan Crha <mcrha@redhat.com> - 3.28.5-2[v- Add patches for RH bug #1633711 (Backport few minor regression fixes from 3.30)E ]1Milan Crha <mcrha@redhat.com> - 3.28.5-1[^- Update to 3.28.5|
] Milan Crha <mcrha@redhat.com> - 3.28.4-1[L- Update to 3.28.4
- Remove patch for GNOME bug #796297 (fixed upstream)
]?Milan Crha <mcrha@redhat.com> - 3.28.3-2[0@- Add patch for GNOME bug #796297 (Cannot modify existing meeting after fix for this bug)ta Milan Crha <mcrha@redhat.com> - 3.28.5-5.1bs@- Resolves: #2081786 (Backport patch for Google OAuth2 change)
f[I E]1Milan Crha <mcrha@redhat.com> - 3.28.5-1[^- Update to 3.28.5|] Milan Crha <mcrha@redhat.com> - 3.28.4-1[L- Update to 3.28.4
- Remove patch for GNOME bug #796297 (fixed upstream)
]?Milan Crha <mcrha@redhat.com> - 3.28.3-2[0@- Add patch for GNOME bug #796297 (Cannot modify existing meeting after fix for this bug)~]!Milan Crha <mcrha@redhat.com> - 3.28.5-8_ - Resolves: #1891558 (Birthday date of Contact depends on system timezone)}] Milan Crha <mcrha@redhat.com> - 3.28.5-7_- Resolves: #1887925 (Allow change of the Microsoft 365 OAuth2 endpoints)]3Milan Crha <mcrha@redhat.com> - 3.28.5-6^U@- Add patch for RH bug #1764669 (Reject creating meetings organized by other users)]QMilan Crha <mcrha@redhat.com> - 3.28.5-5])- Remove patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)
j wu j }] Milan Crha <mcrha@redhat.com> - 3.28.5-7_- Resolves: #1887925 (Allow change of the Microsoft 365 OAuth2 endpoints)]3Milan Crha <mcrha@redhat.com> - 3.28.5-6^U@- Add patch for RH bug #1764669 (Reject creating meetings organized by other users)]QMilan Crha <mcrha@redhat.com> - 3.28.5-5])- Remove patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)X]UMilan Crha <mcrha@redhat.com> - 3.28.5-4]@- Add patch for RH bug #1392567 (Sync CategoryList with mail Labels)
- Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)]5Milan Crha <mcrha@redhat.com> - 3.28.5-3]S- Add patch for RH bug #1696760 (CVE-2019-3890 - SSL Certificates are not validated)]/Milan Crha <mcrha@redhat.com> - 3.28.5-2[v- Add patches for RH bug #1633711 (Backport few minor regression fixes from 3.30)
6 o' 6 X"]UMilan Crha <mcrha@redhat.com> - 3.28.5-4]@- Add patch for RH bug #1392567 (Sync CategoryList with mail Labels)
- Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)!]5Milan Crha <mcrha@redhat.com> - 3.28.5-3]S- Add patch for RH bug #1696760 (CVE-2019-3890 - SSL Certificates are not validated) ]/Milan Crha <mcrha@redhat.com> - 3.28.5-2[v- Add patches for RH bug #1633711 (Backport few minor regression fixes from 3.30)E ]1Milan Crha <mcrha@redhat.com> - 3.28.5-1[^- Update to 3.28.5| ] Milan Crha <mcrha@redhat.com> - 3.28.4-1[L- Update to 3.28.4
- Remove patch for GNOME bug #796297 (fixed upstream)
]?Milan Crha <mcrha@redhat.com> - 3.28.3-2[0@- Add patch for GNOME bug #796297 (Cannot modify existing meeting after fix for this bug)~ ]!Milan Crha <mcrha@redhat.com> - 3.28.5-8_ - Resolves: #1891558 (Birthday date of Contact depends on system timezone)
f[x# z W*eMJosef Ridky <jridky@redhat.com> - 0:1.8.18-4X+- Fix RPMDiff issues and rebuild%)egJosef Ridky <jridky@redhat.com> - 0:1.8.18-3X@- Fix issues with warning: dereferencing type-punned pointer
will break strict-aliasing rules from RPMDiffR(eCJosef Ridky <jridky@redhat.com> - 0:1.8.18-2X- Fix issue in file sources_'e]Josef Ridky <jridky@redhat.com> - 0:1.8.18-1X @- New upstream release 1.8.18 (#1398658)~&]!Milan Crha <mcrha@redhat.com> - 3.28.5-8_ - Resolves: #1891558 (Birthday date of Contact depends on system timezone)}%] Milan Crha <mcrha@redhat.com> - 3.28.5-7_- Resolves: #1887925 (Allow change of the Microsoft 365 OAuth2 endpoints)$]3Milan Crha <mcrha@redhat.com> - 3.28.5-6^U@- Add patch for RH bug #1764669 (Reject creating meetings organized by other users)#]QMilan Crha <mcrha@redhat.com> - 3.28.5-5])- Remove patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)
D ' D R1eCJosef Ridky <jridky@redhat.com> - 0:1.8.18-2X- Fix issue in file sources 0kSPavel Cahyna <pcahyna@redhat.com> - 0:1.8.18-10a{- Protect against negative values to memmove that caused
"ipmitool sol activate" to crash against an IBM DataPower appliance
(#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
Cherry-picked from upstream PR#78.i/scVáclav Doležal <vdolezal@redhat.com> - 0:1.8.18-9^_@- Disable -fstrict-aliasing (RPMDiff issue)^.sMVáclav Doležal <vdolezal@redhat.com> - 0:1.8.18-8^^F- Backport fix for CVE-2020-5208o-e}Josef Ridky <jridky@redhat.com> - 0:1.8.18-7Zy- Remove debug prints shown without -v option (#1483163),e=Josef Ridky <jridky@redhat.com> - 0:1.8.18-6Y{- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)o+e}Josef Ridky <jridky@redhat.com> - 0:1.8.18-5Xs- Remove RPMDiff fix file (#1439269) related to #1398658
W$ i8scVáclav Doležal <vdolezal@redhat.com> - 0:1.8.18-9^_@- Disable -fstrict-aliasing (RPMDiff issue)^7sMVáclav Doležal <vdolezal@redhat.com> - 0:1.8.18-8^^F- Backport fix for CVE-2020-5208o6e}Josef Ridky <jridky@redhat.com> - 0:1.8.18-7Zy- Remove debug prints shown without -v option (#1483163)5e=Josef Ridky <jridky@redhat.com> - 0:1.8.18-6Y{- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)o4e}Josef Ridky <jridky@redhat.com> - 0:1.8.18-5Xs- Remove RPMDiff fix file (#1439269) related to #1398658W3eMJosef Ridky <jridky@redhat.com> - 0:1.8.18-4X+- Fix RPMDiff issues and rebuild%2egJosef Ridky <jridky@redhat.com> - 0:1.8.18-3X@- Fix issues with warning: dereferencing type-punned pointer
will break strict-aliasing rules from RPMDiff
O J O \>a[Jan Grulich <jgrulich@redhat.com> - 0.26-1YW@- Update to 0.26
Resolves: bz#1420227K=[?Daniel Mach <dmach@redhat.com> - 0.23-6RU- Mass rebuild 2014-01-24K<[?Daniel Mach <dmach@redhat.com> - 0.23-5Rk- Mass rebuild 2013-12-27;Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.23-4Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuildw:g Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-11d- Add upstream ipmievd patch to check received msg id against expectation
Fixes problem where SEL response is not recognized correctly
when SEL request times out
Resolves: rhbz#2224569 9kSPavel Cahyna <pcahyna@redhat.com> - 0:1.8.18-10a{- Protect against negative values to memmove that caused
"ipmitool sol activate" to crash against an IBM DataPower appliance
(#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
Cherry-picked from upstream PR#78.
K CeGJan Grulich <jgrulich@redhat.com> - 0.27.0-3^K- Validate relationship of the total size to the offset to avoid crash
Resolves: bz#1775695bBecJan Grulich <jgrulich@redhat.com> - 0.27.0-2\X)@- Minor improvements
Resolves: bz#1652637\AeWJan Grulich <jgrulich@redhat.com> - 0.27.0-1\=@- Exiv2 0.27.0
Resolves: bz#1652637p@aJan Grulich <jgrulich@redhat.com> - 0.26-3Z@- Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a
remote attacker to cause a denial of service via a crafted tif file
Resolves: bz#1548410y?aJan Grulich <jgrulich@redhat.com> - 0.26-2Z- Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp
Resolves: bz#1547207
Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp
Resolves: bz#1545232
Zs% yIaJan Grulich <jgrulich@redhat.com> - 0.26-2Z- Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp
Resolves: bz#1547207
Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp
Resolves: bz#1545232\Ha[Jan Grulich <jgrulich@redhat.com> - 0.26-1YW@- Update to 0.26
Resolves: bz#1420227KG[?Daniel Mach <dmach@redhat.com> - 0.23-6RU- Mass rebuild 2014-01-24KF[?Daniel Mach <dmach@redhat.com> - 0.23-5Rk- Mass rebuild 2013-12-27EFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.23-4Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild"DeaJan Grulich <jgrulich@redhat.com> - 0.27.0-4a - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
Resolves: bz#1990352
" H p " KP[?Daniel Mach <dmach@redhat.com> - 0.23-5Rk- Mass rebuild 2013-12-27OFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.23-4Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild"NeaJan Grulich <jgrulich@redhat.com> - 0.27.0-4a - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
Resolves: bz#1990352MeGJan Grulich <jgrulich@redhat.com> - 0.27.0-3^K- Validate relationship of the total size to the offset to avoid crash
Resolves: bz#1775695bLecJan Grulich <jgrulich@redhat.com> - 0.27.0-2\X)@- Minor improvements
Resolves: bz#1652637\KeWJan Grulich <jgrulich@redhat.com> - 0.27.0-1\=@- Exiv2 0.27.0
Resolves: bz#1652637pJaJan Grulich <jgrulich@redhat.com> - 0.26-3Z@- Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a
remote attacker to cause a denial of service via a crafted tif file
Resolves: bz#1548410
e r+V: e D
a962654ff0fe134fdd88392c47a711e94bc84e08e27d0a7cb7d28e9150d2999aD
45f0406fbbb55abe1511ceade8ca9fb297ae44cce197166c9a3f70561dbffc30D
8246ba658ab0a84cdf2b467c142701ec560b9ced3db90dfd04a7275cb2636566D
301d479dffc9084746269cad6d9be379a3c01fafa139c9203aa5c98ca7e9d79eD
f4c0956c54c55adea5769904bb460f6ab64b017d31e9a73f0a047345be6dd6afD
6cc655263da0213df7eb5a2c6c63b5825361f55336855a67a7b33881d10ca955D
fc2d6ed7481cb42c62b4bd75126fc4237093c74ba7e87908a90815f672bdf45dD
b0179562abc1ff5d40c03661749ce4f7f4c7d58c428cecfc4a3711bfa98e6ec6D
c653aaa3759f6c65e6ccf1dafa36096bf4821f315dbf756943730947258100efD
54b72bac2daf97a8d1ba79e4288be55712b5b35027f2df547f3e0af93bd9b6a5D~
037e885e4b00fa8c73772c5a2e0f05aa735f04807e080c5819a8a15dade3d5dcD}
73cda0f598ca90fe3470940ed62663a7a5a1091731757b8e057fc929d3c1a209D|
1a5b2d18101ca9a398c7873900403ed4ffc7daf7fb801a9ce1649c3fafe185cf
SVb bVecJan Grulich <jgrulich@redhat.com> - 0.27.0-2\X)@- Minor improvements
Resolves: bz#1652637\UeWJan Grulich <jgrulich@redhat.com> - 0.27.0-1\=@- Exiv2 0.27.0
Resolves: bz#1652637pTaJan Grulich <jgrulich@redhat.com> - 0.26-3Z@- Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a
remote attacker to cause a denial of service via a crafted tif file
Resolves: bz#1548410ySaJan Grulich <jgrulich@redhat.com> - 0.26-2Z- Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp
Resolves: bz#1547207
Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp
Resolves: bz#1545232\Ra[Jan Grulich <jgrulich@redhat.com> - 0.26-1YW@- Update to 0.26
Resolves: bz#1420227KQ[?Daniel Mach <dmach@redhat.com> - 0.23-6RU- Mass rebuild 2014-01-24
0 g(- 0 y]aJan Grulich <jgrulich@redhat.com> - 0.26-2Z- Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp
Resolves: bz#1547207
Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp
Resolves: bz#1545232\\a[Jan Grulich <jgrulich@redhat.com> - 0.26-1YW@- Update to 0.26
Resolves: bz#1420227K[[?Daniel Mach <dmach@redhat.com> - 0.23-6RU- Mass rebuild 2014-01-24KZ[?Daniel Mach <dmach@redhat.com> - 0.23-5Rk- Mass rebuild 2013-12-27YFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.23-4Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild"XeaJan Grulich <jgrulich@redhat.com> - 0.27.0-4a - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
Resolves: bz#1990352WeGJan Grulich <jgrulich@redhat.com> - 0.27.0-3^K- Validate relationship of the total size to the offset to avoid crash
Resolves: bz#1775695
" H p " Kd[?Daniel Mach <dmach@redhat.com> - 0.23-5Rk- Mass rebuild 2013-12-27cFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.23-4Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild"beaJan Grulich <jgrulich@redhat.com> - 0.27.0-4a - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
Resolves: bz#1990352aeGJan Grulich <jgrulich@redhat.com> - 0.27.0-3^K- Validate relationship of the total size to the offset to avoid crash
Resolves: bz#1775695b`ecJan Grulich <jgrulich@redhat.com> - 0.27.0-2\X)@- Minor improvements
Resolves: bz#1652637\_eWJan Grulich <jgrulich@redhat.com> - 0.27.0-1\=@- Exiv2 0.27.0
Resolves: bz#1652637p^aJan Grulich <jgrulich@redhat.com> - 0.26-3Z@- Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a
remote attacker to cause a denial of service via a crafted tif file
Resolves: bz#1548410
SVb bjecJan Grulich <jgrulich@redhat.com> - 0.27.0-2\X)@- Minor improvements
Resolves: bz#1652637\ieWJan Grulich <jgrulich@redhat.com> - 0.27.0-1\=@- Exiv2 0.27.0
Resolves: bz#1652637phaJan Grulich <jgrulich@redhat.com> - 0.26-3Z@- Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a
remote attacker to cause a denial of service via a crafted tif file
Resolves: bz#1548410ygaJan Grulich <jgrulich@redhat.com> - 0.26-2Z- Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp
Resolves: bz#1547207
Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp
Resolves: bz#1545232\fa[Jan Grulich <jgrulich@redhat.com> - 0.26-1YW@- Update to 0.26
Resolves: bz#1420227Ke[?Daniel Mach <dmach@redhat.com> - 0.23-6RU- Mass rebuild 2014-01-24
0 g(- 0 yqaJan Grulich <jgrulich@redhat.com> - 0.26-2Z- Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp
Resolves: bz#1547207
Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp
Resolves: bz#1545232\pa[Jan Grulich <jgrulich@redhat.com> - 0.26-1YW@- Update to 0.26
Resolves: bz#1420227Ko[?Daniel Mach <dmach@redhat.com> - 0.23-6RU- Mass rebuild 2014-01-24Kn[?Daniel Mach <dmach@redhat.com> - 0.23-5Rk- Mass rebuild 2013-12-27mFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.23-4Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild"leaJan Grulich <jgrulich@redhat.com> - 0.27.0-4a - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
Resolves: bz#1990352keGJan Grulich <jgrulich@redhat.com> - 0.27.0-3^K- Validate relationship of the total size to the offset to avoid crash
Resolves: bz#1775695
H o Sx[O Joe Orton <jorton@redhat.com> - 2.1.0-6Q@- fix "xmlwf -h" output (#948534)w Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild"veaJan Grulich <jgrulich@redhat.com> - 0.27.0-4a - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
Resolves: bz#1990352ueGJan Grulich <jgrulich@redhat.com> - 0.27.0-3^K- Validate relationship of the total size to the offset to avoid crash
Resolves: bz#1775695btecJan Grulich <jgrulich@redhat.com> - 0.27.0-2\X)@- Minor improvements
Resolves: bz#1652637\seWJan Grulich <jgrulich@redhat.com> - 0.27.0-1\=@- Exiv2 0.27.0
Resolves: bz#1652637praJan Grulich <jgrulich@redhat.com> - 0.26-3Z@- Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a
remote attacker to cause a denial of service via a crafted tif file
Resolves: bz#1548410
b Q j~]{ Joe Orton <jorton@redhat.com> - 2.1.0-12^- add security fixes for CVE-2018-20843, CVE-2019-15903W}]U Joe Orton <jorton@redhat.com> - 2.1.0-11]9- add security fix for CVE-2015-2716[|]] Joe Orton <jorton@redhat.com> - 2.1.0-10X6A- updated security fix for CVE-2016-0718V{[U Joe Orton <jorton@redhat.com> - 2.1.0-9X6@- add security fix for CVE-2016-0718Lz]? Daniel Mach <dmach@redhat.com> - 2.1.0-8RU- Mass rebuild 2014-01-24Ly]? Daniel Mach <dmach@redhat.com> - 2.1.0-7Rk- Mass rebuild 2013-12-27
Z Z "ea Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822
W >N W V[UJoe Orton <jorton@redhat.com> - 2.1.0-9X6@- add security fix for CVE-2016-0718L]?Daniel Mach <dmach@redhat.com> - 2.1.0-8RU- Mass rebuild 2014-01-24L]?Daniel Mach <dmach@redhat.com> - 2.1.0-7Rk- Mass rebuild 2013-12-27S[OJoe Orton <jorton@redhat.com> - 2.1.0-6Q@- fix "xmlwf -h" output (#948534)Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild> e Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315
H j]{Joe Orton <jorton@redhat.com> - 2.1.0-12^- add security fixes for CVE-2018-20843, CVE-2019-15903W]UJoe Orton <jorton@redhat.com> - 2.1.0-11]9- add security fix for CVE-2015-2716[]]Joe Orton <jorton@redhat.com> - 2.1.0-10X6A- updated security fix for CVE-2016-0718
Z Z " eaTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822
9 >J 9 W]UJoe Orton <jorton@redhat.com> - 2.1.0-11]9- add security fix for CVE-2015-2716[]]Joe Orton <jorton@redhat.com> - 2.1.0-10X6A- updated security fix for CVE-2016-0718V[UJoe Orton <jorton@redhat.com> - 2.1.0-9X6@- add security fix for CVE-2016-0718L
]?Daniel Mach <dmach@redhat.com> - 2.1.0-8RU- Mass rebuild 2014-01-24L ]?Daniel Mach <dmach@redhat.com> - 2.1.0-7Rk- Mass rebuild 2013-12-27S [OJoe Orton <jorton@redhat.com> - 2.1.0-6Q@- fix "xmlwf -h" output (#948534)>
eTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315
j]{Joe Orton <jorton@redhat.com> - 2.1.0-12^- add security fixes for CVE-2018-20843, CVE-2019-15903
Z Z "eaTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822
_ >V _ V[UJoe Orton <jorton@redhat.com> - 2.1.0-9X6@- add security fix for CVE-2016-0718L]?Daniel Mach <dmach@redhat.com> - 2.1.0-8RU- Mass rebuild 2014-01-24L]?Daniel Mach <dmach@redhat.com> - 2.1.0-7Rk- Mass rebuild 2013-12-27S[OJoe Orton <jorton@redhat.com> - 2.1.0-6Q@- fix "xmlwf -h" output (#948534)e9Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674>eTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315
H j]{Joe Orton <jorton@redhat.com> - 2.1.0-12^- add security fixes for CVE-2018-20843, CVE-2019-15903W]UJoe Orton <jorton@redhat.com> - 2.1.0-11]9- add security fix for CVE-2015-2716[]]Joe Orton <jorton@redhat.com> - 2.1.0-10X6A- updated security fix for CVE-2016-0718
Z Z " eaTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822
> m L"]?Daniel Mach <dmach@redhat.com> - 2.1.0-8RU- Mass rebuild 2014-01-24L!]?Daniel Mach <dmach@redhat.com> - 2.1.0-7Rk- Mass rebuild 2013-12-27S [OJoe Orton <jorton@redhat.com> - 2.1.0-6Q@- fix "xmlwf -h" output (#948534) Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild e9Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674> eTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315
I j&]{Joe Orton <jorton@redhat.com> - 2.1.0-12^- add security fixes for CVE-2018-20843, CVE-2019-15903W%]UJoe Orton <jorton@redhat.com> - 2.1.0-11]9- add security fix for CVE-2015-2716[$]]Joe Orton <jorton@redhat.com> - 2.1.0-10X6A- updated security fix for CVE-2016-0718V#[UJoe Orton <jorton@redhat.com> - 2.1.0-9X6@- add security fix for CVE-2016-0718
Z Z "'eaTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822
W >N W V-[UJoe Orton <jorton@redhat.com> - 2.1.0-9X6@- add security fix for CVE-2016-0718L,]?Daniel Mach <dmach@redhat.com> - 2.1.0-8RU- Mass rebuild 2014-01-24L+]?Daniel Mach <dmach@redhat.com> - 2.1.0-7Rk- Mass rebuild 2013-12-27S*[OJoe Orton <jorton@redhat.com> - 2.1.0-6Q@- fix "xmlwf -h" output (#948534))Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild>(eTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315
H j0]{Joe Orton <jorton@redhat.com> - 2.1.0-12^- add security fixes for CVE-2018-20843, CVE-2019-15903W/]UJoe Orton <jorton@redhat.com> - 2.1.0-11]9- add security fix for CVE-2015-2716[.]]Joe Orton <jorton@redhat.com> - 2.1.0-10X6A- updated security fix for CVE-2016-0718
Z Z "1eaTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822
9 >J 9 W8]UJoe Orton <jorton@redhat.com> - 2.1.0-11]9- add security fix for CVE-2015-2716[7]]Joe Orton <jorton@redhat.com> - 2.1.0-10X6A- updated security fix for CVE-2016-0718V6[UJoe Orton <jorton@redhat.com> - 2.1.0-9X6@- add security fix for CVE-2016-0718L5]?Daniel Mach <dmach@redhat.com> - 2.1.0-8RU- Mass rebuild 2014-01-24L4]?Daniel Mach <dmach@redhat.com> - 2.1.0-7Rk- Mass rebuild 2013-12-27S3[OJoe Orton <jorton@redhat.com> - 2.1.0-6Q@- fix "xmlwf -h" output (#948534)>2eTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315
j9]{Joe Orton <jorton@redhat.com> - 2.1.0-12^- add security fixes for CVE-2018-20843, CVE-2019-15903
Z Z ":eaTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822
_ >V _ V@[UJoe Orton <jorton@redhat.com> - 2.1.0-9X6@- add security fix for CVE-2016-0718L?]?Daniel Mach <dmach@redhat.com> - 2.1.0-8RU- Mass rebuild 2014-01-24L>]?Daniel Mach <dmach@redhat.com> - 2.1.0-7Rk- Mass rebuild 2013-12-27S=[OJoe Orton <jorton@redhat.com> - 2.1.0-6Q@- fix "xmlwf -h" output (#948534)<e9Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674>;eTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315
H jC]{Joe Orton <jorton@redhat.com> - 2.1.0-12^- add security fixes for CVE-2018-20843, CVE-2019-15903WB]UJoe Orton <jorton@redhat.com> - 2.1.0-11]9- add security fix for CVE-2015-2716[A]]Joe Orton <jorton@redhat.com> - 2.1.0-10X6A- updated security fix for CVE-2016-0718
Z Z "DeaTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822
> m LJ]?Daniel Mach <dmach@redhat.com> - 2.1.0-8RU- Mass rebuild 2014-01-24LI]?Daniel Mach <dmach@redhat.com> - 2.1.0-7Rk- Mass rebuild 2013-12-27SH[OJoe Orton <jorton@redhat.com> - 2.1.0-6Q@- fix "xmlwf -h" output (#948534)GFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildFe9Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674>EeTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315
I jN]{Joe Orton <jorton@redhat.com> - 2.1.0-12^- add security fixes for CVE-2018-20843, CVE-2019-15903WM]UJoe Orton <jorton@redhat.com> - 2.1.0-11]9- add security fix for CVE-2015-2716[L]]Joe Orton <jorton@redhat.com> - 2.1.0-10X6A- updated security fix for CVE-2016-0718VK[UJoe Orton <jorton@redhat.com> - 2.1.0-9X6@- add security fix for CVE-2016-0718
Z Z "OeaTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822
W >N W VU[U Joe Orton <jorton@redhat.com> - 2.1.0-9X6@- add security fix for CVE-2016-0718LT]? Daniel Mach <dmach@redhat.com> - 2.1.0-8RU- Mass rebuild 2014-01-24LS]? Daniel Mach <dmach@redhat.com> - 2.1.0-7Rk- Mass rebuild 2013-12-27SR[O Joe Orton <jorton@redhat.com> - 2.1.0-6Q@- fix "xmlwf -h" output (#948534)Q Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild>PeTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315
e r+V: e D
e4434d6372a44237428f390b21eaa263d38ebe585fcde7c9b6d093bd6a53f942D
55a15d25343aa48f6f67cbbb7365207f4430960b97fe22eea6521df9ef5f6e1eD
997876dc6dace25c6299e9ca1dc76b8112d4862b054ac67c11bcfa1e81c637efD
36e226643adb16e51005fd729514451221b0570727d946df70bc555084b1ab43D
c59613f8305583361be758cf7921fe48cedfaca536f354535c5dca03087c3798D
c102608096eb8bfc89f563c1a82e55812f85dc764c578fc98b29fe740b014b88D
bb4a0d5f27950f8712ba44e0d94dac84d24f409c0064a28dd7e64dab38dea9bcD
ad0cdb4681378d6768d0ba8ff62f05cf6459eb32070c81c7d3eec65c844a8fa5D
7202bdb3eb9b58bc979d8ec45159b6e39ea0ff80df19efb9cc6274a852beee11D
8552fe474d6c38b9a301d6273b81897005c2a518b97ad149df81dca168a8bdc6D
77a2ace1d206cdce59078a04e1d50602e60fa9783490a87d7d894bfb57c1904cD
38165265e6956a27cc026b542a5b84342b4e8d479263713e10c9a0b0871d9705D
46c46ba8573d8f101c53fe10179a66e853ec151d66f5dfb686fb60c5e75aa610
H jX]{ Joe Orton <jorton@redhat.com> - 2.1.0-12^- add security fixes for CVE-2018-20843, CVE-2019-15903WW]U Joe Orton <jorton@redhat.com> - 2.1.0-11]9- add security fix for CVE-2015-2716[V]] Joe Orton <jorton@redhat.com> - 2.1.0-10X6A- updated security fix for CVE-2016-0718
Z Z "Yea Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822
9 >J 9 W`]U
Joe Orton <jorton@redhat.com> - 2.1.0-11]9- add security fix for CVE-2015-2716[_]]
Joe Orton <jorton@redhat.com> - 2.1.0-10X6A- updated security fix for CVE-2016-0718V^[U
Joe Orton <jorton@redhat.com> - 2.1.0-9X6@- add security fix for CVE-2016-0718L]]?
Daniel Mach <dmach@redhat.com> - 2.1.0-8RU- Mass rebuild 2014-01-24L\]?
Daniel Mach <dmach@redhat.com> - 2.1.0-7Rk- Mass rebuild 2013-12-27S[[O
Joe Orton <jorton@redhat.com> - 2.1.0-6Q@- fix "xmlwf -h" output (#948534)>Ze Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315
ja]{
Joe Orton <jorton@redhat.com> - 2.1.0-12^- add security fixes for CVE-2018-20843, CVE-2019-15903
Z Z "bea
Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822
_ >V _ Vh[U Joe Orton <jorton@redhat.com> - 2.1.0-9X6@- add security fix for CVE-2016-0718Lg]? Daniel Mach <dmach@redhat.com> - 2.1.0-8RU- Mass rebuild 2014-01-24Lf]? Daniel Mach <dmach@redhat.com> - 2.1.0-7Rk- Mass rebuild 2013-12-27Se[O Joe Orton <jorton@redhat.com> - 2.1.0-6Q@- fix "xmlwf -h" output (#948534)de9
Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674>ce
Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315
H jk]{ Joe Orton <jorton@redhat.com> - 2.1.0-12^- add security fixes for CVE-2018-20843, CVE-2019-15903Wj]U Joe Orton <jorton@redhat.com> - 2.1.0-11]9- add security fix for CVE-2015-2716[i]] Joe Orton <jorton@redhat.com> - 2.1.0-10X6A- updated security fix for CVE-2016-0718
Z Z "lea Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822
Y > Y Ooq/ Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784ne9 Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674>me Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315
: u# : uq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YtqC Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058sq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561rq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lqq) Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-pq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818
E q4 E Lzq)
Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-yq
Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818xu- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149wu Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 vq' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
~ q'
Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289~q
Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y}qC
Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058|q
Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561{q
Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205
^ / ^ qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-|u
Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-
Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149 u
Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
K v K 9 uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
loc YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{ uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762| uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
! ~ ! {uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189
9 /2 9 w u}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759| uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{ uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762| uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735 u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
F "R F %q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561$qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L#q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-"q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818O!q/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784
A # A *u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149)uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 (q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289'qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y&qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
: u# : 0qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y/qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058.q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561-qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L,q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-+q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818
Q q4! Q L5q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-|4uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#19057353u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#185011492uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 1q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
~ :q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#18322899qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y8qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#16540587q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#18275616qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205
& /2 & @q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561?qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{>uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|=uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735<u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149;uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A Eu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149DuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Cq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289BqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YAqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
KqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YJqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Iq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|HuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{GuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|FuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |QuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{PuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|OuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Nu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149MuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Lq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V VqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LUq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-Tq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818OSq/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wRu}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
e r+V: e D"
457da3dc935ceedbf369f8d8283038086c61d7ec599b6b13c34f1a9eb692decdD!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 v K 9[uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Zq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289YqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YXqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Wq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YaqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058`q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561_qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L^q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-]q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818\u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |fuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735eu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149duOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 cq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289bqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 lq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289kqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YjqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058iq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561hqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lgq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & rq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{puOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|ouOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735nu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149muOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A wu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149vuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 uq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289tqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YsqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
}qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y|qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058{q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|zuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{yuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|xuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735 u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 ~q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Oq/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wu}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9
uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289 qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y
qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058 q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YqC Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq) Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |u Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149u Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 q' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289 q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y qC Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq) Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & $q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561#q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{"u Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|!u Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735 u- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149 u Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A )u- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149(u Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 'q' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289&q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y%qC Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
/q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y.qC Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058-q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|,u Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{+u Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|*u Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |5u Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{4u Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|3u Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#19057352u- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#185011491u Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 0q' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V :q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L9q) Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-8q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818O7q/ Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784w6u} Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9?u Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 >q' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289=q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y<qC Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058;q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561 of jflrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| Y ` a b h k l o u z % * 0
5 : @
E K Q V [ a f l r w }
$ ) !/ "5 #: $? &E 'J (P )V +[ ,a -g .l /q 0w 1| 2 3 4
5 6 7 8# 9) :. ;4 <: =? >E ?K @P AU B[ D` Ef Fl Gq Hw I} J K L
M N O P# Q) R/ S4 T9 U? VD WJ XP YU Z[ \a ]f ^k _q `v a| b c d
e f g h# i(
( l ( YEqC!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Dq !Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561Cq!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LBq)!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-Aq !Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818@u- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |Ju!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Iu-!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149Hu!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Gq'!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289Fq!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 Pq'"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289Oq"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YNqC"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Mq "Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561Lq"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LKq)"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & Vq #Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561Uq#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{Tu"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|Su"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Ru-"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149Qu"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
e r+V: e D/
c7b50fc58609f6e4057703fe1bb83fe6a7c2c9ca068b534e97ac8c7a78e4c8f4D.
6bca052cf755c10a9a15dd05c1eba4a527bd36e88354bfc05d9a678661d7d827D-
4bec36ddbf5963ce6aa8fffba7900ae727da0978060620165937170bee608f51D,
e899e4be36103040ff23d743f3f3ec0eaf8bddfc2604aee19b9ab12e587d87e8D+
f4df6c727e6e445ddca7fe286fc32ec9aed6c8a3fddf42faf905580926d1117aD*
e0a4a368252a2466ddc2b35c58646282829e8b14ff12d3237645aab8609ca5c2D)
5f5c399567e8888b62c997c08412e019f0c5ddf8dd28c78cfa0128928dcd853eD(
662a9d17ec8e137ca36a020dc0efbe8ae088dfd2e1dab2436cf4496bf31f3c75D'
b6ff39e8375e47ff8d8c06f442a8b78add02677aa81e66db47255f6469357012D&
293f6c4af159003426f1ce9255f1bc981d24fe6d1e848489c5b960eb8d9b7e85D%
e31ccbd3696503d01bf17eb08d66c852a75d233ea3040b15ee14477f72f2013dD$
84534b4e8a9f57e1d6cedeafa786721a479e210dc0b2bc07dd005e62c961e69eD#
575a71de43d9ee448ec1678d6e6396b7c3cc5de05454e3681e5a3f900c5dc4bc
A # A [u-#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149Zu#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Yq'#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289Xq#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YWqC#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
aq$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y`qC$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058_q $Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|^u#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{]u#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|\u#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |gu$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{fu$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|eu$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735du-$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149cu$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 bq'$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V lq%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lkq)%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-jq %Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Oiq/%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784whu}$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9qu%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 pq'%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289oq%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YnqC%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058mq %Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YwqC&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058vq &Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561uq&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Ltq)&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-sq &Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818ru-%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ ||u&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735{u-&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149zu&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 yq'&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289xq&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 q''Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y qC'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q 'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561~q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L}q)'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & q (Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561q(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{u'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|u'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149u'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A
u-(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149 u(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
q(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y qC(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqC)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q )Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|u(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{u(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|u(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |u)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{u)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|u)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149u)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q')Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V q*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L q)*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
- q *Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Oq/*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wu})Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9#u*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 "q'*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289!q*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y qC*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058 q *Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( Y)qC+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058(q +Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561'q+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L&q)+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-%q +Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818$u-*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |.u+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735-u-+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149,u+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 +q'+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289*q+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 4q',Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#18322893q,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y2qC,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#16540581q ,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#18275610q,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L/q),Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & :q -Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#18275619q-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{8u,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|7u,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#19057356u-,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#185011495u,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A ?u--Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149>u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 =q'-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289<q-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y;qC-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
Eq.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YDqC.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Cq .Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|Bu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{Au-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|@u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |Ku.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{Ju.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|Iu.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Hu-.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149Gu.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Fq'.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V Pq/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LOq)/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-Nq /Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818OMq//Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wLu}.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9Uu/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Tq'/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289Sq/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YRqC/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Qq /Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( Y[qC0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Zq 0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561Yq0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LXq)0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-Wq 0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Vu-/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
e r+V: e D<
9f8abcf48b89d3171a189ec5449a97b802ba649f300ad32218c8310d9ae89caaD;
63037d9ff075fdac3127a74533eb74eaba6a3dd7a6b714768f44507fd8962d88D:
e03fb473c4111b34ab231b026b46e185aba267a54abad312d1fc4be2fe1a79baD9
ddf36ad1ce4578114e5a65661c1a8de7696ede0b51d5d3a2d8ac551164a4d7ccD8
4bdf983ae009a8ef897188d860d0535c00a5071923c33261e644570fa2d5cb9dD7
7b0c0a663c4992773363ce6c177e9d75ad05e8f8ee19c76a4d1f71fdd6a97da0D6
a4e1b36b41fc592139af224d55fdf5ffecd2f6b528dd8ae73388911df76a9f02D5
f646388701bda1badf96a2fb3864cff8cec8c983277a87af8b050a51147a03afD4
bf7e4ecac92c09b957b31c3b99fe5124cb6807feecce32ee6137fa893ce3daecD3
056e7fe3c5a00be53248709c74120df1d6c073ef1b7b7beba63ff41d48f35c17D2
0c17cb1415294598f297a58396280f055f0f3258f080b1ab697bfe04bbe0008dD1
4d77c6049313415fe1c4aab3e4ee43727167a46b87e28723f6c79f4bffef3607D0
e2a3860deceb4f2f2ddc8390def1eb021196fee5ef075702ec1588374818efa6
~ |`u0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735_u-0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149^u0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 ]q'0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289\q0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 fq'1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289eq1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YdqC1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058cq 1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561bq1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Laq)1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & lq 2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561kq2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{ju1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|iu1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735hu-1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149gu1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A qu-2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149pu2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 oq'2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289nq2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YmqC2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
wq3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YvqC3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058uq 3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|tu2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{su2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|ru2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |}u3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{|u3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|{u3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735zu-3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149yu3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 xq'3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V q4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
- q 4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Oq/4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784w~u}3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9u4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289q4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqC4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q 4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( Y
qC5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058 q 5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561 q5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L
q)5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
- q 5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818u-4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |u5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149u5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289q5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 q'6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289q6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqC6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q 6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561q6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & q 7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561 q7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{ u6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|u6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149u6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A #u-7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149"u7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 !q'7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289 q7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y qC7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
)q8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y(qC8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058'q 8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|&u7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{%u7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|$u7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |/u8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{.u8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|-u8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735,u-8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149+u8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 *q'8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V 4q9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L3q)9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-2q 9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818O1q/9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784w0u}8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 99u9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 8q'9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#18322897q9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y6qC9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#16540585q 9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( Y?qC:Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058>q :Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561=q:Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L<q):Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-;q :Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818:u-9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |Du:Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Cu-:Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149Bu:Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Aq':Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289@q:Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 Jq';Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289Iq;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YHqC;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Gq ;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561Fq;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LEq);Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & Pq <Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561Oq<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{Nu;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|Mu;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Lu-;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149Ku;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A Uu-<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149Tu<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Sq'<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289Rq<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YQqC<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
[q=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YZqC=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Yq =Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|Xu<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{Wu<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|Vu<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
e r+V: e DI
ed6e07b307de61a56b4041aaba7661b6fcdeb599402390671b3db4d8c0b4cdfcDH
8f01b6b2a6ce4e4129d3b25510ee332c113e0f671df54f56ad2dff8e711a11b8DG
eb7bebdbd517434195d041324099366ce234dfd58929430224320ff59b866c8eDF
864bee28e84214e17a2569dc4782fe389e64424fc470fc80157b86f2bdf0df03DE
2ebe4dd6652fe19a01c6576bd236175a5952205b51f6f3c76a25a539af114ca1DD
e818d4e04d72d3014d26343beb92384fad7a4c394dde4f7dc2a541d0416f569fDC
132ce82de39a18ad1be89af9ce56bdf2cf2471eddae86a469dfbdaef42478652DB
55db8fa1e758d5038aa9f74ed8982f1b73505b989a9643ef81f8b704f975fb8cDA
2eb32fa5c1642715eed3bff00d204b72790f716770349e1a3307229ec9f1a88aD@
4badd67c65c46b09cdfb999c67dcf07efbec0e2b1b5ee21318fb415d90aff27eD?
1b7c83c31498a1d9eec34b76e89035fa039c4d34cdfb507851df956c9a5cb86bD>
8901005d391fcf6247d95caeaae9763898d0d5a0e8da308e73380bbdefdbbb1cD=
90b4df9d1f42ba4c9d6ed5a171805bd3aa1ab73ca030c78d62b088ffd716ff81
$ q4! $ |au=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{`u=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|_u=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735^u-=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149]u=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 \q'=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V fq>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Leq)>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-dq >Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Ocq/>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wbu}=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9ku>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 jq'>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289iq>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YhqC>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058gq >Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YqqC?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058pq ?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561oq?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lnq)?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-mq ?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818lu->Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |vu?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735uu-?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149tu?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 sq'?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289rq?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 |q'@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289{q@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YzqC@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058yq @Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561xq@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lwq)@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & q AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qAOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{ u@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|u@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735~u-@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149}u@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A u-AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uAOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qAOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCAOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
qBOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y qCBOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058 q BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|
uAOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{ uAOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|uAOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |uBOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{uBOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|uBOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uBOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-q COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Oq/COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wu}BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9 uCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( Y#qCDOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058"q DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561!qDOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L q)DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
- q DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818 u-COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |(uDOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735'u-DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149&uDOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 %q'DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289$qDOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 .q'EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289-qEOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y,qCEOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058+q EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561*qEOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L)q)EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & 4q FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#18275613qFOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{2uEOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|1uEOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#19057350u-EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149/uEOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A 9u-FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#185011498uFOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 7q'FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#18322896qFOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y5qCFOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
?qGOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y>qCGOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058=q GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|<uFOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{;uFOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|:uFOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |EuGOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{DuGOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|CuGOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Bu-GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149AuGOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 @q'GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V JqHOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LIq)HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-Hq HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818OGq/HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wFu}GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9OuHOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Nq'HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289MqHOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YLqCHOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Kq HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YUqCIOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Tq IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561SqIOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LRq)IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-Qq IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Pu-HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |ZuIOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Yu-IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149XuIOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Wq'IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289VqIOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
e r+V: e DV
147dc35e6fff3dff6a81de8b9ddae7411d557a2f80bb93a6b4040fde544b5c73DU
0c0ba36a5e8704ab304024f5f4bc9616e4592da8ef6293f27ee584cd13805973DT
176d124a27956ac315b44b6b42bb13fe2fa7702d805ae7b58731b8d634bc0a2eDS
34210a0ec25b1987cb28b7719bb7ab7d7eff1adb56711dc0f4835ba89256cc82DR
bf1f40d6279d065b649f886d586e1bc6bb518de89df420459f9ba36c8a3f403aDQ
129f6f9ff00bcf11fa14cab3ec12d80bf9b9612f1194adc7aaacead1b3e7b651DP
4935d172a32f8bef9fd07236702a965e4d14a6e86b534e6c52fbe4aad6047e03DO
87fc214b49a5aba9c5d113e739d9654287b4a0272123ff8eead1a12b7c845ec3DN
4e0fff288896ea81f4c997cb6ce0c357c6515c6987555c53ddbd8c800177f083DM
a8c33d4ab95933b150aa784ba9bae1d03d59e6633afd229fc51bafff1df0e892DL
e36b9d803bc4c2cac122e737759eaaf8944848895c016d80232d05a405a97587DK
e7be65394477619c3bc276a472efa4a7f642dce66c5dee203826d0391223391aDJ
5d10762096ebcbd7efdc8eecb2d15ca2b35d49c6fbf417a3f85b555ac622eafc
6 0$G 6 `q'JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289_qJOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y^qCJOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058]q JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561\qJOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L[q)JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & fq KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561eqKOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{duJOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|cuJOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735bu-JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149auJOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A ku-KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149juKOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 iq'KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289hqKOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YgqCKOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
qqLOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YpqCLOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058oq LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|nuKOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{muKOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|luKOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |wuLOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{vuLOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|uuLOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735tu-LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149suLOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 rq'LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V |qMOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L{q)MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-zq MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Oyq/MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wxu}LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9uMOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qMOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y~qCMOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058}q MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YqCNOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qNOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-q NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818u-MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ | uNOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735 u-NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149
uNOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qNOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 q'OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qOOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qOOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L
q)OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & q POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qPOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{uOOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|uOOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uOOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A u-POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149 uPOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qPOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCPOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
#qQOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y"qCQOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058!q QOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561| uPOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{ uPOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762| uPOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |)uQOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{(uQOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|'uQOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735&u-QOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149%uQOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 $q'QOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V .qROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L-q)ROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-,q ROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818O+q/ROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784w*u}QOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 93uROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 2q'ROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#18322891qROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y0qCROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058/q ROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( Y9qCSOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#16540588q SOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#18275617qSOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L6q)SOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-5q SOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#18018184u-ROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |>uSOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735=u-SOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149<uSOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 ;q'SOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289:qSOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 Dq'TOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289CqTOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YBqCTOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Aq TOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561@qTOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L?q)TOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & Jq UOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561IqUOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{HuTOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|GuTOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Fu-TOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149EuTOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A Ou-UOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149NuUOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Mq'UOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289LqUOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YKqCUOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
UqVOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YTqCVOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Sq VOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|RuUOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{QuUOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|PuUOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |[uVOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{ZuVOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|YuVOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Xu-VOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149WuVOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Vq'VOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V `qWOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L_q)WOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-^q WOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818O]q/WOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784w\u}VOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
e r+V: e Dc
31dbae1dc23e561a169170b6a4e76e5abb65227590e305195a2a4c4709cc4a0dDb
6fc93f49bcfb356742bd0f053b32fc44739f52e356d8575874ed5e03d9fd09baDa
7d006c10e1e850ab6583783df33de8d968fa27fd47068c159bb2bac55c7eeecaD`
222d1cb4f63704dc1cb456a7733ac13be509de7210e4f3ef68095502f871ad42D_
889cf274fa9d2dc353f72daefeafeef0bab8bbc22a11e69f5009602f524dfc5fD^
b023cc7bb4beba93c1fa4b4ea3d00f85891637ae3f1692b51863007e799f93e4D]
8649585113a6705fe59be338b82b0ec406c0c3351b940dbebdffabd40fbc2eb5D\
c24fe30d66c39a6dc7e1701a8503f46d3e747baaf032761258334310ad79e035D[
9952c1ad9640539f832b2907ecca1438442f4d21c5b1159a6b061b54d0245407DZ
600d4f94f14cc026544d704f5a8190f1e11d4020dcff350bfca31fef4c037731DY
ee225d31e25d3fd9c6524bed27748c75c0944037288a89578e3005fb2eedea8fDX
b2a7339af908b8ee4bf1f85d0d58404c6e69e1311f16a5ce08f7c4e01629bac6DW
3c80748d03286542b429491e9861564380252fcbcd1d92283ddfa799fb2dc3f5
K v K 9euWOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 dq'WOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289cqWOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YbqCWOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058aq WOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YkqCXOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058jq XOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561iqXOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lhq)XOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-gq XOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818fu-WOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |puXOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735ou-XOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149nuXOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 mq'XOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289lqXOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 vq'YOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289uqYOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YtqCYOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058sq YOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561rqYOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lqq)YOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & |q ZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561{qZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{zuYOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|yuYOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735xu-YOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149wuYOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A u-ZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149 uZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'ZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289~qZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y}qCZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
q[Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqC[Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q [Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|uZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{uZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|uZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |
u[Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{ u[Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762| u[Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
u-[Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149 u[Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'[Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V q\Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)\Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-q \Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Oq/\Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wu}[Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9u\Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'\Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289q\Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqC\Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q \Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( Y qC]Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058 q ]Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561q]Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)]Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-q ]Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818u-\Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |"u]Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735!u-]Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149 u]Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q']Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289 q]Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 (q'^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289'q^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y&qC^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058%q ^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561$q^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L#q)^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & .q _Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561-q_Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{,u^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|+u^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735*u-^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149)u^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 of flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| k4 l9 m? nE oJ pO qU rZ t` uf vk wq xw y| z { | } ~ # ) . 3 9 > D J O U [ ` e k p v |
" ( . 3 9 ? D I O T Z ` e k q v { # ( - 3 8 > D I O U Z _ e j p v { " ( - 3 9 > C I N T Z _ e k p u {
A # A 3u-_Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#185011492u_Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 1q'_Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#18322890q_Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y/qC_Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
9q`Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y8qC`Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#16540587q `Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|6u_Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{5u_Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|4u_Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |?u`Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{>u`Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|=u`Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735<u-`Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149;u`Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 :q'`Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V DqaOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LCq)aOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-Bq aOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818OAq/aOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784w@u}`Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9IuaOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Hq'aOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289GqaOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YFqCaOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Eq aOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YOqCbOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Nq bOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561MqbOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LLq)bOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-Kq bOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Ju-aOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |TubOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Su-bOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149RubOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Qq'bOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289PqbOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 Zq'cOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289YqcOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YXqCcOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Wq cOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561VqcOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LUq)cOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & `q dOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561_qdOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{^ucOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|]ucOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735\u-cOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149[ucOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
e r+V: e Dp
47ba59d4b1cb5b673b1229b14f41032935be9d093380d4ebda5b7a3a020d1829Do
c19464cde9f5e6924a75e43dc5a5f2a6f67fe7b180bebf78fe28c2a9ea75b38aDn
733cd7b64f33a955dabc853a4b1cd0c8c37bf1e8e726fc0bacb1d1ce4472cea3Dm
b0a39d51fd2f8d6d5a8f011e24a249847065815606a7f38e2041f4b496cc0190Dl
a0725d3676ffa6a24b4686e544f68d9c21b869c274d28cebfafb3c70638c371eDk
bba4318d019ae161e780b129f85d5ab91b299e3b9745f99a659fc52dacdfb221Dj
6151436b0cdfffbc9de946bc989ec92ce8de7794357a065c433e0c8dfd3e7fdbDi
7f851a8769285e3f9758a4eaf850aac198635f11095424df455837066af7c141Dh
8dbf315b824ef3ed709ed82b3c42515cc6137b6f4eaf95ccff91f5d362b86985Dg
a1970a5fc923219ddca4fa8d05e7f29ee858edf46448313a44734fb4d4c4149dDf
22e3e72ea0793e34fa431ce4f6c77af3460b1cd5e67558a3b644f1e438900d99De
42ab3de394252ea2575955dde550d26c4c2d82245f48145c1880b3eee1f049e5Dd
f313883838c79487308bec6209cc25ea688f77759c6bbdb331c4237999334033
A # A eu-dOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149dudOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 cq'dOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289bqdOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YaqCdOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
kqeOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YjqCeOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058iq eOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|hudOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{gudOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|fudOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |queOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{pueOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|oueOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735nu-eOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149mueOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 lq'eOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V vqfOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Luq)fOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-tq fOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Osq/fOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wru}eOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9{ufOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 zq'fOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289yqfOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YxqCfOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058wq fOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YqCgOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058 q gOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qgOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L~q)gOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-}q gOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818|u-fOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |ugOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-gOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149ugOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'gOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qgOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 q'hOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289 qhOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y
qChOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058 q hOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qhOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)hOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & q iOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qiOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{uhOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|uhOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-hOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149
uhOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A u-iOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uiOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'iOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qiOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCiOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
qjOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y qCjOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q jOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|uiOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{uiOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|uiOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |#ujOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{"ujOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|!ujOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735 u-jOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149 ujOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'jOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V (qkOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L'q)kOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-&q kOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818O%q/kOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784w$u}jOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9-ukOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 ,q'kOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289+qkOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y*qCkOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058)q kOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( Y3qClOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#16540582q lOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#18275611qlOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L0q)lOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-/q lOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818.u-kOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |8ulOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#19057357u-lOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#185011496ulOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 5q'lOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#18322894qlOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 >q'mOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289=qmOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y<qCmOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058;q mOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561:qmOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L9q)mOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & Dq nOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561CqnOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{BumOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|AumOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735@u-mOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149?umOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A Iu-nOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149HunOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Gq'nOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289FqnOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YEqCnOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
OqoOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YNqCoOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Mq oOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|LunOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{KunOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|JunOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |UuoOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{TuoOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|SuoOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Ru-oOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149QuoOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Pq'oOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V ZqpOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LYq)pOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-Xq pOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818OWq/pOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wVu}oOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9_upOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 ^q'pOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289]qpOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y\qCpOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058[q pOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YeqCqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058dq qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561cqqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lbq)qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-aq qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818`u-pOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
e r+V: e D}
0fa4711e307981d6c9174ab9d2a6a3091cae2a4a43da04ce41a45407c143d240D|
bffc06b208a2645d2beeed5ae0505ff7be55cec6055ed415ae076e3e74f9aa2eD{
83b3cec745768f57ddcdabe20c4c848fee7126552012cc9fa7a1be366825f4adDz
b050823fb61726e8976cc72b306b33896e52a61ba34741aaaacac29f20a9d428Dy
f65aabbd9e294d13896f966d93142b9e462abc508dc124cbced08758d3d9247aDx
f037f86f203b3b15569c8b08388aeeeba9eda00ceac6945410b851d91563d688Dw
de01b8c6bef6e8935094026fbbfa516daaf970a7e92df84e3705c559853ece19Dv
74cf9b03dd4c4fd8b948481f59523011514a6b13612c953041fe8c112c7aa0d9Du
e783291d5ab16df4900451958335994c05de05b904aa33cf87682f106e2baf20Dt
3b72db221eb1db189edcf9c97b83663b0494d24fa1fe73c09e6916b1baaec8e6Ds
eb1886e298af82bc97e979491381fe23e271aabb79f09bef435b84c876817fbdDr
ad3ed272a76cefffd6cfcbe64c326b1286965a0a1950072cb4a2337f839ca989Dq
a83eb350bcaf8f5bf58970e8c94bdcbdd5f690dc3d7e90d21bf5532d9a597c62
~ |juqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735iu-qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149huqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 gq'qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289fqqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 pq'rOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289oqrOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YnqCrOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058mq rOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561lqrOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lkq)rOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & vq sOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561uqsOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{turOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|surOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735ru-rOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149qurOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A {u-sOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149zusOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 yq'sOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289xqsOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YwqCsOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
qtOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y qCtOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q tOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|~usOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{}usOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762||usOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |utOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{utOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|utOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-tOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149utOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'tOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V quOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L q)uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
q uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818O q/uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wu}tOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9uuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289quOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
q uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YqCvOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q vOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qvOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)vOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-q vOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818u-uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ | uvOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-vOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uvOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'vOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qvOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 "q'wOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289!qwOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y qCwOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058 q wOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561 qwOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L q)wOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & (q xOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561'qxOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{&uwOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|%uwOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735$u-wOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149#uwOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A -u-xOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149,uxOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 +q'xOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289*qxOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y)qCxOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
3qyOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y2qCyOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#16540581q yOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|0uxOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{/uxOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|.uxOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |9uyOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{8uyOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|7uyOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#19057356u-yOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#185011495uyOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 4q'yOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V >qzOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L=q)zOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-<q zOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818O;q/zOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784w:u}yOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9CuzOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Bq'zOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289AqzOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y@qCzOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058?q zOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YIqC{Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Hq {Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561Gq{Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LFq){Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-Eq {Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Du-zOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |Nu{Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Mu-{Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149Lu{Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Kq'{Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289Jq{Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 Tq'|Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289Sq|Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YRqC|Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Qq |Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561Pq|Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LOq)|Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & Zq }Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561Yq}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{Xu|Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|Wu|Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Vu-|Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149Uu|Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A _u-}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149^u}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 ]q'}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289\q}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y[qC}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
eq~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YdqC~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058cq ~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|bu}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{au}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|`u}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
e r+V: e D
aae99874c09826e7ffdc47307dc7fa4aa1ef9302e99a8432186772a7619d629dD
7621e69d1f6a5287ec45f7ae6e9410b61ce65c095de32ed792b022a4520de7d1D
f854a25eb972d3b371b5576e432a9a20947bb7be07e83253e98bd2b39025d16aD
daad2593294d57ecd2ba590f2b8292ca6c1a15ac312f2ce7da8dbb7128a21db5D
da3a8c2abd8f7012e5d4bebd1103714f6d567dbd1f5281431b01ffd6d61025fbD
48c1cdad82823961370ac3c16ed4a93a8b8b46bde9034024316e1a72af9522d4D
c6f14dac0ec25c398840115e52a340353f02aaea3834f3a0eba9c59477ed29acD
682b34f9ba65eb2126b3140d6fe7319d11e990cef5a3d74f66b79f00719e6adaD
dba6df762c2a7b4df2011636555ed8910dd7c702ac1a8c2233d5bdc1752907ddD
bece87454982682fbdb7722fda453b231999ee186bb714b2151fb7a2f81a9897D
411d4dcdad36f25940ac90a44c595935da1b410049409e9047bf8e5a0d896d00D
0ee97394870cffe996ee7e4b916ac7fd3a1843f7b577ee2bf1a309f6b5e3e325D~
79973cc33f53bcaa66861b86f5ca88df66744a2b5a58c2f2f7f0dc2e37c67a36
$ q4! $ |ku~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{ju~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|iu~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735hu-~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149gu~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 fq'~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V pqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Loq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-nq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Omq/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wlu}~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9uuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 tq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289sqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YrqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058qq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( Y{qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058zq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561yqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lxq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-wq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818vu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ | uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149~uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 }q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289|qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561 qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{
uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762| uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y
qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ | uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{ uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V "qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L!q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
- q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818O q/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784w u}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9'uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 &q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289%qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y$qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058#q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( Y-qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058,q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561+qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L*q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-)q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818(u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |2uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#19057351u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#185011490uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 /q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289.qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 8q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#18322897qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y6qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#16540585q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#18275614qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L3q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & >q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561=qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{<uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|;uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735:u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#185011499uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A Cu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149BuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Aq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289@qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y?qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
IqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YHqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Gq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|FuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{EuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|DuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |OuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{NuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|MuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Lu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149KuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Jq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V TqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LSq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-Rq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818OQq/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wPu}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9YuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Xq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289WqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YVqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Uq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( Y_qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058^q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561]qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L\q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-[q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Zu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |duOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735cu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149buOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 aq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289`qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
e r+V: e D
08ec368681cd5235d44e7c13637d697d5bc44aaf5cfd9f49fc33531191a5717bD
dbc4de07d0e60afa27428cc96344b4424c8cf8209e8961f014f4989de0ede96dD
8ba45a2931417326f5988ff2fa9db54c083bfab2f5fe260ea31072a26b0d9adbD
d60ccb9327412f5e9b92a65ce3c4d3ec7c9cef9e0d21433888157b9758c62587D
966ec9754e2cc3fe39729998dcef6f877a9061b02c36cada54ff696eb4dd98c6D
ab37db3638f3d63077ca3270c6b587f0147ede183844f7fd95cc12babea8f8a8D
94aaf8d6f0db1300c892d45a1a8334173bca651326cfadf717623f714460fe61D
6838d1704d6089791d6b3d53de842f0901465128bc97227e71cbfb2073418234D
03ea957f3e2be56bc876a29ef48424ad8cc38c240505a263f9907bb55882d20fD
32fdc77032a9de115471b54289fc5f0fd4e2fe3f428c90a14db22d18d246a781D
0f2b27230afc7e0f0e4681b53e974e613f93cdd1f542dd4b63a37b74db2caa55D
6d6d3ccc17a9eee0b41995b6db620df39e9070da91831a1ee3a9c9f9bf6eb135D
d0a250d18f4b89599438cfd448782db11f8012472af6df48eced91d60be23eb0
6 0$G 6 jq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289iqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YhqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058gq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561fqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Leq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & pq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561oqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{nuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|muOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735lu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149kuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A uu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149tuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 sq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289rqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
{qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YzqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058yq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|xuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{wuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|vuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{ uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735~u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149}uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 |q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Oq/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wu}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9 uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289 qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818 u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & "q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561!qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{ uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762| uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735 u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149 uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A 'u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149&uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 %q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289$qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y#qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
-qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y,qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058+q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|*uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{)uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|(uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |3uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{2uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|1uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#19057350u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149/uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 .q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V 8qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L7q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-6q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818O5q/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784w4u}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9=uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 <q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289;qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y:qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#16540589q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YCqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Bq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561AqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L@q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-?q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818>u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |HuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Gu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149FuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Eq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289DqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 Nq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289MqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YLqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Kq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561JqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LIq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & Tq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561SqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{RuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|QuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Pu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149OuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A Yu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149XuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Wq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289VqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YUqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
_qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y^qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058]q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|\uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{[uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|ZuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |euOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{duOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|cuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735bu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149auOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 `q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V jqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Liq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-hq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Ogq/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wfu}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
e r+V: e D$
cd5dcd832d5dda7bea32dbdbe45ad8e13ef022b0a9d83e5b78427944aaab8f18D#
847a5e41805b10521ebc6aff29431992c0a22a8d17c634a1e13970158fa1af9cD"
45aa06d1829f4839d099598b630eabc9be0756f534ae4a81d0d6b7ab5922bc09D!
4e697ffc60fca75a99deb8089617f94c12550b52fd5e8a07ec885967667c7541D
b6d54a557b4be65879c789367443480c4c3cb12adfbb35c324b6786e2f8ba2a7D
65b46c58329dcd3a310fbfb4c8b9371639bb59c96629f150e82a7820305f44fbD
fc3bab612213d15e8f3305d921a6c746a042fa8d06b3e8b75aa25f4eeced3daeD
83c007c9ec430e38dbcdce8b868daa1718da2090b7ef60980dfaeff2c633aa2fD
25c4de241ae499bb87004a0bd23c0264cf0e5ec7003c83fa57962fc6ca0fff80D
d63186e6cef38839b7dec9223b2e71fce4525a6125dbb201cab77ddcd29b6eb3D
8126411e939ed28c342373246930b21454d5af2651f4d36c56e7d17b279978ffD
e4d444d844a4cafb1f7e4fa1a67562e38078b7cbb3816a7216492e9a2d40c822D
b067b77274a7e008ceafa9fe949f6649af4f291e1fe843cc01d5255b977ff6be
K v K 9ouOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 nq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289mqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YlqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058kq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YuqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058tq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561sqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lrq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-qq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818pu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |zuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735yu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149xuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 wq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289vqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y~qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058}q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L{q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149
uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{
uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762| uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Oq/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wu}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759 of Vflrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| " ' - 2 8 > C I O T Y _ d j p u { " ' - 3 8 = C H N T Y _ e j o u
z
! ' , 2 8 = C I N S Y ^ d j !o "u #{ $ % & ' ( ) *! +' ,- -2 .7 /= 0B 1H 2N 3S 4Y 5_ 6d 7i 8o :t ;z < = > ? @ A B! C& D, E2 F7 G= HC IH JM KS LX M^ Nd Oi Po Ru Sz T U
K v K 9!uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289 qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058 q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( Y'qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058&q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561%qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L$q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-#q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818"u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |,uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735+u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149*uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 )q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289(qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 2q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#18322891qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y0qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058/q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561.qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L-q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & 8q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#18275617qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{6uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|5uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#19057354u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#185011493uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A =u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149<uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 ;q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289:qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y9qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
CqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YBqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Aq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|@uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{?uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|>uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |IuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{HuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|GuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Fu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149EuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Dq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V NqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LMq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-Lq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818OKq/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wJu}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9SuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Rq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289QqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YPqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Oq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YYqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Xq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561WqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LVq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-Uq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Tu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |^uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735]u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149\uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 [q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289ZqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 dq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289cqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YbqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058aq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561`qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L_q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & jq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561iqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{huOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|guOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735fu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149euOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
e r+V: e D1
5bf7fa347b641deaa5b1dd5752635a5a43ee644e71cca2e924839f74490cf862D0
3baf28c0979d5f90558e58f7499f8c92082cc8e9b4e8e68acfa4d95a6a902be4D/
3af5287deb01c0880a6d6916b3fc0ecdfaf93e576369b1b9cfdcc1613bc22a7dD.
33beb19a202929092a6e1605a3f6115c5442714589a627267a8ba12528865a7eD-
8cab4a117a1efc20543417ed7f4d69f0626329800f58029dc586d0a2bdadea33D,
27091e98db08364ca7ce67c92ed7fea1f2ef9a1b64dd06f659d6bb1cf563d729D+
a4aa01b378a3f60ccb4500c7b55fd5e37fde220dcb3863302b729de23aefcf5aD*
332d0c5fbd59617b2854c4ef7acc7a7862676bdf591666e519d3b09c2f3435e8D)
ecb4654a5f2ad2d8e3539f0b0076eee523a54eda425ef270ec5cb0394fa1ea8cD(
04338d51e121bd3112024a6e032e9dc376c437e7d1914a17d85868c3c59e8f72D'
d31ed1bf33208a48c1659c4aa33c952c4a88624e0ef52fdda4e5cb196354ac40D&
d264ee805ecda49c30b17382368adfa7d60dde5fe60862b200ff3a5b11b02cfaD%
248724675fc45561c18b6906dfbeacda8c1e9b4451c512be528649e3e34c63b9
A # A ou-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149nuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 mq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289lqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YkqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
uqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YtqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058sq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|ruOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{quOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|puOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |{uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{zuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|yuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735xu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149wuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 vq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-~q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818O}q/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784w|u}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( Y qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561 qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289 qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A !u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149 uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289 qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
'qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y&qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058%q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|$uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{#uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|"uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |-uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{,uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|+uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735*u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149)uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 (q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V 2qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L1q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-0q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818O/q/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784w.u}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 97uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 6q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#18322895qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y4qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#16540583q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( Y=qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058<q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561;qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L:q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-9q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#18018188u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |BuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Au-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149@uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 ?q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289>qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 Hq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289GqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YFqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Eq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561DqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LCq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & Nq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561MqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{LuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|KuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Ju-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149IuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A Su-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149RuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Qq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289PqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YOqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
YqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YXqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Wq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|VuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{UuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|TuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |_uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{^uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|]uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735\u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149[uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Zq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V dqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lcq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-bq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Oaq/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784w`u}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9iuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 hq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289gqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YfqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058eq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YoqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058nq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561mqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Llq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-kq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818ju-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
e r+V: e D>
9bbb081fdd6485184aa28dae8f3c1946680fdf0f31efe538dc75912939ac72efD=
041f5f1e8b93254eb47e8b18434325a8ecfea6152330918662e991c8b435cdfeD<
f5670dae0add00bdfd492611247f9503be7281552df1cc745f5b359269462efdD;
64eaa7b016a8e2dfc63c23045a2a81e467d7e0553af8d19b447d9f84265a2b26D:
ae4a37c25fe4cd0a6a91a2140530796b4b2c6059cf099f2bd2f65504b92e3742D9
53777bef4b884ec988d12664f72eaadc76fa2b24890080c6649e74f9c9769d94D8
f7c83637d8468e19213b90ac92d161c309fd5941a55567c16d8598b7ff66e882D7
6389f5f5c812cb020dd4bcf4dc948be8137ffef92ecbea10a81268530ca43c7bD6
18a944fd24888ada7034062b23c8096dad6ee599c3c1262ac434394919b64aeeD5
4535717be95f1dcc2921d19bb37276451f877f99558ee69df6a67597d545a010D4
15a85325dd91b5d41165cb155f2faac7f1c67c75551d52a664027fc559a5c62cD3
2676b39f946e027f903e8815ed686e37a2b8101f353ca2063367ccce93da761bD2
2aba6dcda4b716437cd39f662b144aa8fe26ea6f15b54f36ae5c7340a33c8b36
~ |tuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735su-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149ruOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 qq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289pqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 zq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289yqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YxqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058wq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561vqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Luq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{~uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|}uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735|u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149{uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y
qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058 q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149
uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Oq/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wu}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( Y!qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058 q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561 qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
- q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818 u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |&uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735%u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149$uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 #q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289"qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 ,q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289+qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y*qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058)q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561(qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L'q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & 2q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#18275611qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{0uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|/uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735.u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149-uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A 7u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#185011496uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 5q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#18322894qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y3qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
=qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y<qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058;q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|:uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{9uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|8uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |CuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{BuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|AuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735@u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149?uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 >q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V HqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LGq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-Fq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818OEq/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wDu}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9MuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Lq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289KqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YJqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Iq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YSqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Rq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561QqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LPq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-Oq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Nu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |XuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Wu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149VuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Uq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289TqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 ^q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289]qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y\qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058[q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561ZqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LYq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & dq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561cqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{buOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|auOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735`u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149_uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A iu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149huOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 gq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289fqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YeqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
oqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YnqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058mq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|luOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{kuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|juOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
e r+V: e DK
9db93e031838e2ddbd104024296a70bd847b8e704bfa2e92f767297158bf6b6cDJ
a219a29b75fdb33749412440d21f8b1ff92ad6616637e7e8cb818daf66fabe36DI
8864cd46b197d894c0037ac70b483f8091d39212b9cf6ace09e8c117d76a1c12DH
0dc9fbacba7b11cb8fe67dd7a2596d89132d937ce3099a1e872d630f5f68fafcDG
5a34d2e48c7b78b23d4ae6c9697fa3094d3e9bc3dfdb7d09f1670206a32b7e46DF
23bb9783bb909c0cddbbcaeb08d2ecd0d27ba3325b65571783ef5837be019a60DE
af59395f80e4a8af28d6c6ccafe41de973b85b01eae99f978460cfe0198a5ee6DD
f93d558436474dcf26feea265313045cb98abbe57849c1f0f07a622d83612eb1DC
30fb1512e1cb3b565ab1bc735499011c641766b730df4ce0ba6baf035db92c70DB
9d6605784a491b25286fafef98f82226f7634b2197c483f0273690b3701d2853DA
cfbce8f5d94f01a7ce8c1dc8545168b7c3c1c2a62bae89f00a69ebd439002ffaD@
c5b8ab0d8d7cb70f48d43af7b11ed34cd4a069ee3f243e0b5c1601adbbf3b7baD?
87421442fb8dc3f0b7025e35dcc33c47b33e35e6cff668106fc871a7fdc443b7
$ q4! $ |uuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{tuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|suOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735ru-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149quOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 pq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V zqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lyq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-xq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Owq/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wvu}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 ~q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289}qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y|qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058{q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818 u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |
uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735 u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561 qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
!qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058 q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561| uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{ uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762| uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |'uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{&uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|%uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735$u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149#uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 "q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V ,qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L+q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-*q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818O)q/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784w(u}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 91uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 0q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289/qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y.qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058-q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( Y7qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#16540586q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#18275615qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L4q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-3q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#18018182u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |<uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735;u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149:uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 9q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#18322898qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 Bq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289AqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y@qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058?q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561>qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L=q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & Hq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561GqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{FuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|EuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Du-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149CuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A Mu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149LuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Kq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289JqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YIqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
SqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YRqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Qq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|PuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{OuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|NuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |YuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{XuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|WuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Vu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149UuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Tq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V ^qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L]q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-\q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818O[q/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wZu}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9cuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 bq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289aqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y`qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058_q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YiqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058hq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561gqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lfq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-eq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818du-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |nuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735mu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149luOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 kq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289jqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
e r+V: e DX
758f0b0b263f27bf6a17362a156e2d236f0210bb8fd11a69dbd5e2d9ca1be328DW
c0676678d1a3bcf8ce6a786607357db6145dd2dff6d685cc3e3b7312511343fcDV
0e63c2347e36ece8d4f15909b64a5a6c3b79f38a6e53f614e310fbfd86f26b06DU
f9c8ee59079e1a20cac32e3fe1b20f6f94b271c132efb4de7f5f0ebad73c632dDT
6813b3fd706e79a0721cb26c926c2fdd57aaf1300c3f48cd8573cbf02eb06168DS
3a7a5d5027216e07b3eae0f5b2cf013760700d03cca8961ca4395cd637ac3c5eDR
2b0dc7f8c8bffbe06bd0124f1cbc07bb9eda4e34b45db595e6101d68eee5ebedDQ
37356ac1734506c064e4fdf1e87d69a442a12767a7e98626e8c9c571fb460198DP
4874985f1d75f7c43dceb6929982f36fc7a9566042a70c22a42bc6e3e6a65b58DO
a52c89128003d6c528346ece42b32f7126708399f05995deaa7aa1e7035625a9DN
9c90fdb57f5b173c0200715d87a85083b5f8dd268a7aef1df7baddcd4f7ba0adDM
c7df39cc317144af8cab982c0134ec6182c78bfaafe8e47f94f33a0cd4991c97DL
c9587fe47330c8c9650ddea3de6ed9574b7027a816ed5dc48c5f19783f043700
6 0$G 6 tq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289sqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YrqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058qq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561pqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Loq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & zq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561yqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{xuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|wuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735vu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149~uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 }q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289|qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y{qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762| uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ | uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{
uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762| uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818O
q/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784w u}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ | uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735 u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149 uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289 qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 &q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289%qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y$qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058#q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561"qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L!q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & ,q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561+qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{*uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|)uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735(u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149'uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A 1u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#185011490uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 /q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289.qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y-qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
7qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y6qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#16540585q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|4uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{3uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|2uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |=uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{<uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|;uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735:u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#185011499uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 8q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V BqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LAq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-@q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818O?q/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784w>u}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
K v K 9GuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Fq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289EqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YDqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Cq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YMqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Lq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561KqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LJq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-Iq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Hu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |RuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Qu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149PuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 Oq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289NqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6 Xq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289WqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YVqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058Uq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561TqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205LSq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-
& /2 & ^q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561]qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{\uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|[uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735Zu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149YuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A cu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149buOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 aq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289`qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738Y_qCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
iqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YhqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058gq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|fuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{euOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|duOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |ouOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{nuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|muOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735lu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149kuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 jq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
V 3 V tqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lsq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-rq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818Oqq/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ - fence_compute/fence_evacuate: fix region_name content type and
project shortopt in usage text and project-domain shortopt
Resolves: rhbz#1760203
- fence_rhevm: add cookie support
Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
Resolves: rhbz#1769784wpu}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
e r+V: e De
c3729b12ca4075c75da87d40054a8cd81d3a2be928846fec9b090f2282da0809Dd
f0254a038a74be08cf548424dccbe986696e47e0e50cd52cf8f1ecdf5cf432b0Dc
e1db7a00d2204d116b7e75f87e236094c6578a2ebf4a48a7af11edd3618ebce3Db
b233baa0fb9d61676aea025d1f7b834810ad66467adee309673c302ed29261eeDa
87b930e9a82a5887d60c5bf35a95284a59744832eca1423a916a46ac5dc807a3D`
7d0c45c842a51eb4e14eecce16a8da906ea6668258c6fe279d9649645d4bd422D_
a4124d55ffe94d6e2682cb82eb1191d84b8b271f2950a8cbf86be4ade606a768D^
58a5f6025a63f07b9dc9793ec13c58029a3502315d1bb29d4c7015091c9e8dbeD]
c565a665dee8bff0a1df1f9e228b65e7935723b9a6e91ae26f4b30dc3b90452bD\
2f00c2ff15b5c113c361dc4ad8be22ff7ec2bde7c1098b7abe496171dc1d7b49D[
84e0987f67e674a41976b9cd147cec00e6c57db8a4feeb9b141b7fb607b890efDZ
8d6cfc5c9cef32a028f7938e7be7de7b81bde37d434b23891fb9c2f0583c18dfDY
164f86624a46a2f71b3b2a951d0544b44be7971180929255dc526785acc3a143
K v K 9yuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 xq'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289wqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YvqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058uq Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561
( l ( YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058~q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561}qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205L|q)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
-{q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's
Resolves: rhbz#1801818zu-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114
~ |uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289 qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738
6 0$G 6
q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289 qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205Lq)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g@- fence_aws: improve parameter logic to allow setting region parameter
while using credentials from ~/.aws/config
Resolves: rhbz#1673468
- of flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| W X Y Z! [' \, ]1 ^7 _< `B aH bM cS dY e^ fc gi hn jt kz l m n o p q r s& t, u1 v7 w= xB yG zM {R |X }^ ~c i o t y
! + 5 @ K V a l v " - 8 C M W a k u
+ 6 A K U ` k v , 8 D O Z e p { ) 5 @ L X d p | ) 5 ?
& /2 & q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|@- fence_aws: fix possible race condition
Resolves: rhbz#1816205{uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|
uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735 u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149 uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024
A # A u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058
qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^@- fence_vmware_rest: fix encoding issues
Resolves: rhbz#1793738YqCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
and avoid failing when hitting it during the monitor-action
Resolves: rhbz#1654058q Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^- fence_vmware_rest: improve exception handling
Resolves: rhbz#1827561|uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762|uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735
$ q4! $ |!uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an@- fence_aws: add "filter" parameter
Resolves: rhbz#2003189{ uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`@- fence_azure_arm: fix MSI support
Resolves: rhbz#1957762| uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_@- fence_aws: add support for IMDSv2
Resolves: rhbz#1905735 u-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#18501149 uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'@- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors
Resolves: rhbz#1860545
Resolves: rhbz#1862024 q'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text
Resolves: rhbz#1832289
K ?I K O+aAEike Rathke <erack@redhat.com> - 102.9.0-4d - Update to 102.9.0 build2W*_SJan Horak <jhorak@redhat.com> - 102.9.0-2d @- removed disable-openh264-downloadO)aAEike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1O(aAEike Rathke <erack@redhat.com> - 102.8.0-2cw- Update to 102.8.0 build2O'aAEike Rathke <erack@redhat.com> - 102.8.0-1c=@- Update to 102.8.0 build1O&aAEike Rathke <erack@redhat.com> - 102.7.0-1cS@- Update to 102.7.0 build1%_-Jan Horak <jhorak@redhat.com> - 102.6.0-2c@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9O$aAEike Rathke <erack@redhat.com> - 102.6.0-1c.- Update to 102.6.0 build1i#_wJan Horak <jhorak@redhat.com> - 102.5.0-2c@- Added libwebrtc screencast patch for newer featuresw"u}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b@- fence_aws: fix IMDSv2 support
Resolves: rhbz#2050759
q @eo q O5aAEike Rathke <erack@redhat.com> - 102.9.0-4d - Update to 102.9.0 build2W4_SJan Horak <jhorak@redhat.com> - 102.9.0-2d @- removed disable-openh264-downloadO3aAEike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1O2aAEike Rathke <erack@redhat.com> - 102.8.0-2cw- Update to 102.8.0 build2O1aAEike Rathke <erack@redhat.com> - 102.8.0-1c=@- Update to 102.8.0 build1O0aAEike Rathke <erack@redhat.com> - 102.7.0-1cS@- Update to 102.7.0 build1/_-Jan Horak <jhorak@redhat.com> - 102.6.0-2c@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9O.aAEike Rathke <erack@redhat.com> - 102.6.0-1c.- Update to 102.6.0 build1i-_wJan Horak <jhorak@redhat.com> - 102.5.0-2c@- Added libwebrtc screencast patch for newer featuresQ,cCEike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1
3 #-/ 3 Q@cCEike Rathke <erack@redhat.com> - 102.11.0-2dS@- Update to 102.11.0 build2Q?cCEike Rathke <erack@redhat.com> - 102.11.0-1dP@- Update to 102.11.0 build1Q>cCEike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1O=aAEike Rathke <erack@redhat.com> - 102.9.0-4d - Update to 102.9.0 build2W<_SJan Horak <jhorak@redhat.com> - 102.9.0-2d @- removed disable-openh264-downloadO;aAEike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1O:aAEike Rathke <erack@redhat.com> - 102.8.0-2cw- Update to 102.8.0 build2O9aAEike Rathke <erack@redhat.com> - 102.8.0-1c=@- Update to 102.8.0 build1O8aAEike Rathke <erack@redhat.com> - 102.7.0-1cS@- Update to 102.7.0 build17_-Jan Horak <jhorak@redhat.com> - 102.6.0-2c@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9Q6cCEike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1
5 w%// 5 OKaAEike Rathke <erack@redhat.com> - 102.8.0-1c=@- Update to 102.8.0 build1QJcCEike Rathke <erack@redhat.com> - 102.11.0-2dS@- Update to 102.11.0 build2QIcCEike Rathke <erack@redhat.com> - 102.11.0-1dP@- Update to 102.11.0 build1QHcCEike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1OGaAEike Rathke <erack@redhat.com> - 102.9.0-4d - Update to 102.9.0 build2WF_SJan Horak <jhorak@redhat.com> - 102.9.0-2d @- removed disable-openh264-downloadOEaAEike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1ODaAEike Rathke <erack@redhat.com> - 102.8.0-2cw- Update to 102.8.0 build2OCaAEike Rathke <erack@redhat.com> - 102.8.0-1c=@- Update to 102.8.0 build1OBaAEike Rathke <erack@redhat.com> - 102.7.0-1cS@- Update to 102.7.0 build1A_-Jan Horak <jhorak@redhat.com> - 102.6.0-2c@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9
- \\% - OVaAEike Rathke <erack@redhat.com> - 102.8.0-2cw- Update to 102.8.0 build2OUaAEike Rathke <erack@redhat.com> - 102.8.0-1c=@- Update to 102.8.0 build1QTcCEike Rathke <erack@redhat.com> - 102.12.0-1dw6- Update to 102.12.0 build1 Se3Anton Bobrov <abobrov@redhat.com> 102.11.0-2dl- Do not import cert to certdb on override exception:
rhbz#2118991
mzbz@1833330QRcCEike Rathke <erack@redhat.com> - 102.11.0-2dS@- Update to 102.11.0 build2QQcCEike Rathke <erack@redhat.com> - 102.11.0-1dP@- Update to 102.11.0 build1QPcCEike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1OOaAEike Rathke <erack@redhat.com> - 102.9.0-4d - Update to 102.9.0 build2WN_SJan Horak <jhorak@redhat.com> - 102.9.0-2d @- removed disable-openh264-downloadOMaAEike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1OLaAEike Rathke <erack@redhat.com> - 102.8.0-2cw- Update to 102.8.0 build2
% TZw# w % OaaAEike Rathke <erack@redhat.com> - 102.9.0-4d - Update to 102.9.0 build2W`_SJan Horak <jhorak@redhat.com> - 102.9.0-2d @- removed disable-openh264-downloadO_aAEike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1Q^cCEike Rathke <erack@redhat.com> - 102.12.0-1dw6- Update to 102.12.0 build1 ]e3Anton Bobrov <abobrov@redhat.com> 102.11.0-2dl- Do not import cert to certdb on override exception:
rhbz#2118991
mzbz@1833330Q\cCEike Rathke <erack@redhat.com> - 102.11.0-2dS@- Update to 102.11.0 build2Q[cCEike Rathke <erack@redhat.com> - 102.11.0-1dP@- Update to 102.11.0 build1QZcCEike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1OYaAEike Rathke <erack@redhat.com> - 102.9.0-4d - Update to 102.9.0 build2WX_SJan Horak <jhorak@redhat.com> - 102.9.0-2d @- removed disable-openh264-downloadOWaAEike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1
' Xu!y' { ' QlcCEike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1OkaAEike Rathke <erack@redhat.com> - 102.9.0-4d - Update to 102.9.0 build2Wj_SJan Horak <jhorak@redhat.com> - 102.9.0-2d @- removed disable-openh264-downloadOiaAEike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1QhcCEike Rathke <erack@redhat.com> - 102.13.0-2d- Update to 102.13.0 build2QgcCEike Rathke <erack@redhat.com> - 102.13.0-1dr@- Update to 102.13.0 build1QfcCEike Rathke <erack@redhat.com> - 102.12.0-1dw6- Update to 102.12.0 build1 ee3Anton Bobrov <abobrov@redhat.com> 102.11.0-2dl- Do not import cert to certdb on override exception:
rhbz#2118991
mzbz@1833330QdcCEike Rathke <erack@redhat.com> - 102.11.0-2dS@- Update to 102.11.0 build2QccCEike Rathke <erack@redhat.com> - 102.11.0-1dP@- Update to 102.11.0 build1QbcCEike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1
B Xu!y% B ve3Anton Bobrov <abobrov@redhat.com> 102.11.0-2dl- Do not import cert to certdb on override exception:
rhbz#2118991
mzbz@1833330QucCEike Rathke <erack@redhat.com> - 102.11.0-2dS@- Update to 102.11.0 build2QtcCEike Rathke <erack@redhat.com> - 102.11.0-1dP@- Update to 102.11.0 build1QscCEike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1QrcCEike Rathke <erack@redhat.com> - 102.13.0-2d- Update to 102.13.0 build2QqcCEike Rathke <erack@redhat.com> - 102.13.0-1dr@- Update to 102.13.0 build1QpcCEike Rathke <erack@redhat.com> - 102.12.0-1dw6- Update to 102.12.0 build1 oe3Anton Bobrov <abobrov@redhat.com> 102.11.0-2dl- Do not import cert to certdb on override exception:
rhbz#2118991
mzbz@1833330QncCEike Rathke <erack@redhat.com> - 102.11.0-2dS@- Update to 102.11.0 build2QmcCEike Rathke <erack@redhat.com> - 102.11.0-1dP@- Update to 102.11.0 build1
e r+V: e Dr
158e955d20950ef61a38c645accc22bd6cf37c7f31e06cdd3313c2bc5b0d969fDq
74484befc2ade710df325b9af62b87ffaef3b2b13a00935396297467ec8e98a8Dp
e0d62271ecc1d123dd2dfe6e63131923215ed05f9f87bb42cbe1c713b4cfec5dDo
4eb117f25866c9e447c845336fe608b5c30ec80262a6ffb3dfb33756f0001e62Dn
dd98390ecb2875b55a18bb8ce2f4fe960e7d8f308cf206decddcbcf25c6638c0Dm
9e0249e756fa1e3dfb334a1acf42d322e19676dcef92227940e29b52a2972853Dl
6341f007df657335759aa49bd308613667e9481106e29eff6fe1a74abfc9200aDk
ce4f5cfaaa8ee847baeaa1449c9bda07462f87ac1b32027dc3d2b1086d417890Dj
3fb0b77a99715fb931ff65f91089240046d339752c82495a1069470792e26818Di
ea41aafc4258682847158cad9b72b66d86e801649ba22dfbbb766d88ea1addafDh
2699d7c26ffc9f022f434f324f0530dfee3fbaba767104e9902922124ba69b63Dg
155f2a67548cb8ab54265b28dbf3f1e731e26cf182da45d98c95425930890046Df
97f2f474f7e410b8f477b1e905b6207ab4497c4def5fa6005eca7739687d0fca
. X[
e . QcCEike Rathke <erack@redhat.com> - 102.12.0-1dw6- Update to 102.12.0 build1 e3Anton Bobrov <abobrov@redhat.com> 102.11.0-2dl- Do not import cert to certdb on override exception:
rhbz#2118991
mzbz@1833330QcCEike Rathke <erack@redhat.com> - 102.11.0-2dS@- Update to 102.11.0 build2Q~cCEike Rathke <erack@redhat.com> - 102.11.0-1dP@- Update to 102.11.0 build1Q}cCEike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1K|c7Eike Rathke <erack@redhat.com> - 102.14.0-3d- Bump NVR to rebuildR{aGJan Horak <jhorak@redhat.com> - 102.14.0-2d- Rebuild due to rhbz#2228948QzcCEike Rathke <erack@redhat.com> - 102.14.0-1d@- Update to 102.14.0 build1QycCEike Rathke <erack@redhat.com> - 102.13.0-2d- Update to 102.13.0 build2QxcCEike Rathke <erack@redhat.com> - 102.13.0-1dr@- Update to 102.13.0 build1QwcCEike Rathke <erack@redhat.com> - 102.12.0-1dw6- Update to 102.12.0 build1
. Xa
* . Q cCEike Rathke <erack@redhat.com> - 102.13.0-2d- Update to 102.13.0 build2Q cCEike Rathke <erack@redhat.com> - 102.13.0-1dr@- Update to 102.13.0 build1Q
cCEike Rathke <erack@redhat.com> - 102.12.0-1dw6- Update to 102.12.0 build1 e3Anton Bobrov <abobrov@redhat.com> 102.11.0-2dl- Do not import cert to certdb on override exception:
rhbz#2118991
mzbz@1833330QcCEike Rathke <erack@redhat.com> - 102.11.0-2dS@- Update to 102.11.0 build2QcCEike Rathke <erack@redhat.com> - 102.11.0-1dP@- Update to 102.11.0 build1Kc7Eike Rathke <erack@redhat.com> - 102.14.0-3d- Bump NVR to rebuildRaGJan Horak <jhorak@redhat.com> - 102.14.0-2d- Rebuild due to rhbz#2228948QcCEike Rathke <erack@redhat.com> - 102.14.0-1d@- Update to 102.14.0 build1QcCEike Rathke <erack@redhat.com> - 102.13.0-2d- Update to 102.13.0 build2QcCEike Rathke <erack@redhat.com> - 102.13.0-1dr@- Update to 102.13.0 build1
. W a
~* . QcCEike Rathke <erack@redhat.com> - 102.14.0-1d@- Update to 102.14.0 build1QcCEike Rathke <erack@redhat.com> - 102.13.0-2d- Update to 102.13.0 build2QcCEike Rathke <erack@redhat.com> - 102.13.0-1dr@- Update to 102.13.0 build1QcCEike Rathke <erack@redhat.com> - 102.12.0-1dw6- Update to 102.12.0 build1 e3Anton Bobrov <abobrov@redhat.com> 102.11.0-2dl- Do not import cert to certdb on override exception:
rhbz#2118991
mzbz@1833330QcCEike Rathke <erack@redhat.com> - 102.11.0-2dS@- Update to 102.11.0 build2QcCEike Rathke <erack@redhat.com> - 102.11.0-1dP@- Update to 102.11.0 build1QcCEike Rathke <erack@redhat.com> - 102.15.0-1dF@- Update to 102.15.0 build2Kc7Eike Rathke <erack@redhat.com> - 102.14.0-3d- Bump NVR to rebuildRaGJan Horak <jhorak@redhat.com> - 102.14.0-2d- Rebuild due to rhbz#2228948Q
cCEike Rathke <erack@redhat.com> - 102.14.0-1d@- Update to 102.14.0 build1
i ] q {) i l"_}Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ- Fix for expat CVE-2022-40674 and non functional webrtcN!_AJan Horak <jhorak@redhat.com> - 102.3.0-6c p- Update to 102.3.0 build1O aAEike Rathke <erack@redhat.com> - 91.12.0-1b?- Update to 91.12.0 build1O aAEike Rathke <erack@redhat.com> - 91.11.0-2bU- Update to 91.11.0 build2O aAEike Rathke <erack@redhat.com> - 91.11.0-1b- Update to 91.11.0 build1O aAEike Rathke <erack@redhat.com> - 91.10.0-1b- Update to 91.10.0 build1L ]?Jan Horak <jhorak@redhat.com> - 91.9.1-1b- Update to 91.9.1 build1F_1Eike Rathke <erack@redhat.com> - 91.9.0-1bg- Update to 91.9.0QcCEike Rathke <erack@redhat.com> - 102.15.0-1dF@- Update to 102.15.0 build2Kc7Eike Rathke <erack@redhat.com> - 102.14.0-3d- Bump NVR to rebuildRaGJan Horak <jhorak@redhat.com> - 102.14.0-2d- Rebuild due to rhbz#2228948
j \r |+ j O-aAEike Rathke <erack@redhat.com> - 102.4.0-1cF@- Update to 102.4.0 build1l,_}Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ- Fix for expat CVE-2022-40674 and non functional webrtcN+_AJan Horak <jhorak@redhat.com> - 102.3.0-6c p- Update to 102.3.0 build1O*aAEike Rathke <erack@redhat.com> - 91.12.0-1b?- Update to 91.12.0 build1O)aAEike Rathke <erack@redhat.com> - 91.11.0-2bU- Update to 91.11.0 build2O(aAEike Rathke <erack@redhat.com> - 91.11.0-1b- Update to 91.11.0 build1O'aAEike Rathke <erack@redhat.com> - 91.10.0-1b- Update to 91.10.0 build1L&]?Jan Horak <jhorak@redhat.com> - 91.9.1-1b- Update to 91.9.1 build1F%_1Eike Rathke <erack@redhat.com> - 91.9.0-1bg- Update to 91.9.0O$aAEike Rathke <erack@redhat.com> - 102.5.0-1ck@- Update to 102.5.0 build1O#aAEike Rathke <erack@redhat.com> - 102.4.0-1cF@- Update to 102.4.0 build1
D \
fT D O8aAEike Rathke <erack@redhat.com> - 102.6.0-1c.- Update to 102.6.0 build1i7_wJan Horak <jhorak@redhat.com> - 102.5.0-2c@- Added libwebrtc screencast patch for newer featuresO6aAEike Rathke <erack@redhat.com> - 102.5.0-1ck@- Update to 102.5.0 build1O5aAEike Rathke <erack@redhat.com> - 102.4.0-1cF@- Update to 102.4.0 build1l4_}Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ- Fix for expat CVE-2022-40674 and non functional webrtcN3_AJan Horak <jhorak@redhat.com> - 102.3.0-6c p- Update to 102.3.0 build1O2aAEike Rathke <erack@redhat.com> - 91.12.0-1b?- Update to 91.12.0 build1O1aAEike Rathke <erack@redhat.com> - 91.11.0-2bU- Update to 91.11.0 build2O0aAEike Rathke <erack@redhat.com> - 91.11.0-1b- Update to 91.11.0 build1O/aAEike Rathke <erack@redhat.com> - 91.10.0-1b- Update to 91.10.0 build1O.aAEike Rathke <erack@redhat.com> - 102.5.0-1ck@- Update to 102.5.0 build1
D \
gT D OCaAEike Rathke <erack@redhat.com> - 91.11.0-2bU- Update to 91.11.0 build2OBaAEike Rathke <erack@redhat.com> - 102.6.0-1c.- Update to 102.6.0 build1iA_wJan Horak <jhorak@redhat.com> - 102.5.0-2c@- Added libwebrtc screencast patch for newer featuresO@aAEike Rathke <erack@redhat.com> - 102.5.0-1ck@- Update to 102.5.0 build1O?aAEike Rathke <erack@redhat.com> - 102.4.0-1cF@- Update to 102.4.0 build1l>_}Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ- Fix for expat CVE-2022-40674 and non functional webrtcN=_AJan Horak <jhorak@redhat.com> - 102.3.0-6c p- Update to 102.3.0 build1O<aAEike Rathke <erack@redhat.com> - 91.12.0-1b?- Update to 91.12.0 build1O;aAEike Rathke <erack@redhat.com> - 91.11.0-2bU- Update to 91.11.0 build2O:aAEike Rathke <erack@redhat.com> - 91.11.0-1b- Update to 91.11.0 build1O9aAEike Rathke <erack@redhat.com> - 91.10.0-1b- Update to 91.10.0 build1
_ ]J _ OMaAEike Rathke <erack@redhat.com> - 91.11.0-2bU- Update to 91.11.0 build2OLaAEike Rathke <erack@redhat.com> - 102.7.0-1cS@- Update to 102.7.0 build1K_-Jan Horak <jhorak@redhat.com> - 102.6.0-2c@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9OJaAEike Rathke <erack@redhat.com> - 102.6.0-1c.- Update to 102.6.0 build1iI_wJan Horak <jhorak@redhat.com> - 102.5.0-2c@- Added libwebrtc screencast patch for newer featuresOHaAEike Rathke <erack@redhat.com> - 102.5.0-1ck@- Update to 102.5.0 build1OGaAEike Rathke <erack@redhat.com> - 102.4.0-1cF@- Update to 102.4.0 build1lF_}Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ- Fix for expat CVE-2022-40674 and non functional webrtcNE_AJan Horak <jhorak@redhat.com> - 102.3.0-6c p- Update to 102.3.0 build1ODaAEike Rathke <erack@redhat.com> - 91.12.0-1b?- Update to 91.12.0 build1
` ]J ` NW_AJan Horak <jhorak@redhat.com> - 102.3.0-6c p- Update to 102.3.0 build1OVaAEike Rathke <erack@redhat.com> - 102.7.0-1cS@- Update to 102.7.0 build1U_-Jan Horak <jhorak@redhat.com> - 102.6.0-2c@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9OTaAEike Rathke <erack@redhat.com> - 102.6.0-1c.- Update to 102.6.0 build1iS_wJan Horak <jhorak@redhat.com> - 102.5.0-2c@- Added libwebrtc screencast patch for newer featuresORaAEike Rathke <erack@redhat.com> - 102.5.0-1ck@- Update to 102.5.0 build1OQaAEike Rathke <erack@redhat.com> - 102.4.0-1cF@- Update to 102.4.0 build1lP_}Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ- Fix for expat CVE-2022-40674 and non functional webrtcNO_AJan Horak <jhorak@redhat.com> - 102.3.0-6c p- Update to 102.3.0 build1ONaAEike Rathke <erack@redhat.com> - 91.12.0-1b?- Update to 91.12.0 build1
_ ?/T _ Na_AJan Horak <jhorak@redhat.com> - 102.3.0-6c p- Update to 102.3.0 build1O`aAEike Rathke <erack@redhat.com> - 102.8.0-2cw- Update to 102.8.0 build2O_aAEike Rathke <erack@redhat.com> - 102.8.0-1c=@- Update to 102.8.0 build1O^aAEike Rathke <erack@redhat.com> - 102.7.0-1cS@- Update to 102.7.0 build1]_-Jan Horak <jhorak@redhat.com> - 102.6.0-2c@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9O\aAEike Rathke <erack@redhat.com> - 102.6.0-1c.- Update to 102.6.0 build1i[_wJan Horak <jhorak@redhat.com> - 102.5.0-2c@- Added libwebrtc screencast patch for newer featuresOZaAEike Rathke <erack@redhat.com> - 102.5.0-1ck@- Update to 102.5.0 build1OYaAEike Rathke <erack@redhat.com> - 102.4.0-1cF@- Update to 102.4.0 build1lX_}Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ- Fix for expat CVE-2022-40674 and non functional webrtc
^ ?/T ^ OkaAEike Rathke <erack@redhat.com> - 102.5.0-1ck@- Update to 102.5.0 build1OjaAEike Rathke <erack@redhat.com> - 102.8.0-2cw- Update to 102.8.0 build2OiaAEike Rathke <erack@redhat.com> - 102.8.0-1c=@- Update to 102.8.0 build1OhaAEike Rathke <erack@redhat.com> - 102.7.0-1cS@- Update to 102.7.0 build1g_-Jan Horak <jhorak@redhat.com> - 102.6.0-2c@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9OfaAEike Rathke <erack@redhat.com> - 102.6.0-1c.- Update to 102.6.0 build1ie_wJan Horak <jhorak@redhat.com> - 102.5.0-2c@- Added libwebrtc screencast patch for newer featuresOdaAEike Rathke <erack@redhat.com> - 102.5.0-1ck@- Update to 102.5.0 build1OcaAEike Rathke <erack@redhat.com> - 102.4.0-1cF@- Update to 102.4.0 build1lb_}Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ- Fix for expat CVE-2022-40674 and non functional webrtc
s Bgq s OuaAEike Rathke <erack@redhat.com> - 102.5.0-1ck@- Update to 102.5.0 build1OtaAEike Rathke <erack@redhat.com> - 102.9.0-3d - Update to 102.9.0 build2Ws_SJan Horak <jhorak@redhat.com> - 102.9.0-2d @- removed disable-openh264-downloadOraAEike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1OqaAEike Rathke <erack@redhat.com> - 102.8.0-2cw- Update to 102.8.0 build2OpaAEike Rathke <erack@redhat.com> - 102.8.0-1c=@- Update to 102.8.0 build1OoaAEike Rathke <erack@redhat.com> - 102.7.0-1cS@- Update to 102.7.0 build1n_-Jan Horak <jhorak@redhat.com> - 102.6.0-2c@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9OmaAEike Rathke <erack@redhat.com> - 102.6.0-1c.- Update to 102.6.0 build1il_wJan Horak <jhorak@redhat.com> - 102.5.0-2c@- Added libwebrtc screencast patch for newer features
e r+V: e D
107322552a77011bd81b348ebfbb5f9181eec6a6de74a1a746e6bccf9773e1a6D~
7cc5e8e7cd7fd7b33ddc2f01d6d1866e7073a0a2e8ec65d4a8b21009e3f67777D}
b9339ad70e81b9edbe99c176f811eaa3f6b5564cff528ff56f4f44d677623c02D|
5b68af3481bd9ec99e96979c742095c04ad5a420aca88d0278499ae1949f56d7D{
649668855741b2c9edbad09dfdf69374c2011e1b429ea28cf0f6c96a62a14f57Dz
a2cead9a7e5666819ec51f9e5c76ccde1eaf396651494f7020eb59615a2f9a17Dy
a019256591b9ba5eafbd13f6202b604bb7a7441347110ad87f864f0f8d374298Dx
1a25dc8c20fd98c6b44d7a50ee5bbeab01a9250c1764965613176ca25661a781Dw
39a345eb07bae6f35b9362289fb910cb39998826047249bc3991a0ab55547bceDv
eabf42cd353ef8d1bad1431cc770d9f360563c64237198926aaa475aab327c3dDu
daff96fd89f92832ea99fda83cf1b76e717202ee8aa4dbe27e75350ce028065fDt
469ca6e8993db68735d7333e493a80dd4dde10f37d4c15b290e072922a543da8Ds
a83374c57cbdfe6fe09065ecf3df2781d4ed835b1b41143f2b4e74dde0e6a8cd
, Bgq , aKEike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URLO~aAEike Rathke <erack@redhat.com> - 102.9.0-3d - Update to 102.9.0 build2W}_SJan Horak <jhorak@redhat.com> - 102.9.0-2d @- removed disable-openh264-downloadO|aAEike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1O{aAEike Rathke <erack@redhat.com> - 102.8.0-2cw- Update to 102.8.0 build2OzaAEike Rathke <erack@redhat.com> - 102.8.0-1c=@- Update to 102.8.0 build1OyaAEike Rathke <erack@redhat.com> - 102.7.0-1cS@- Update to 102.7.0 build1x_-Jan Horak <jhorak@redhat.com> - 102.6.0-2c@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9OwaAEike Rathke <erack@redhat.com> - 102.6.0-1c.- Update to 102.6.0 build1iv_wJan Horak <jhorak@redhat.com> - 102.5.0-2c@- Added libwebrtc screencast patch for newer features
! \
K` s ! O
aAEike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1 aKEike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URLQcCEike Rathke <erack@redhat.com> - 115.10.0-1f-- Update to 115.10.0 build1K_;Jan Horak <jhorak@redhat.com> - 115.9.1-2f-- Removed expat CVE fixHa3Eike Rathke <erack@redhat.com> - 115.9.1-1er- Update to 115.9.1OaAEike Rathke <erack@redhat.com> - 115.9.0-2e8@- Update to 115.9.0 build2jawEike Rathke <erack@redhat.com> - 115.9.0-1eC- Update to 115.9.0 build1
- Fix expat CVE-2023-52425OaAEike Rathke <erack@redhat.com> - 115.8.0-1eY- Update to 115.8.0 build1OaAEike Rathke <erack@redhat.com> - 115.7.0-1eo- Update to 115.7.0 build1OaAEike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1O aAEike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1
h \
K ^ h OaAEike Rathke <erack@redhat.com> - 115.7.0-1eo- Update to 115.7.0 build1OaAEike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1OaAEike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1QcCEike Rathke <erack@redhat.com> - 115.10.0-1f-- Update to 115.10.0 build1K_;Jan Horak <jhorak@redhat.com> - 115.9.1-2f-- Removed expat CVE fixHa3Eike Rathke <erack@redhat.com> - 115.9.1-1er- Update to 115.9.1OaAEike Rathke <erack@redhat.com> - 115.9.0-2e8@- Update to 115.9.0 build2jawEike Rathke <erack@redhat.com> - 115.9.0-1eC- Update to 115.9.0 build1
- Fix expat CVE-2023-52425O
aAEike Rathke <erack@redhat.com> - 115.8.0-1eY- Update to 115.8.0 build1O aAEike Rathke <erack@redhat.com> - 115.7.0-1eo- Update to 115.7.0 build1O aAEike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1
f AV\
f O aAEike Rathke <erack@redhat.com> - 115.8.0-1eY- Update to 115.8.0 build1O aAEike Rathke <erack@redhat.com> - 115.7.0-1eo- Update to 115.7.0 build1O aAEike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1O aAEike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1Q cCEike Rathke <erack@redhat.com> - 115.11.0-1f:- Update to 115.11.0 build1QcCEike Rathke <erack@redhat.com> - 115.10.0-1f-- Update to 115.10.0 build1K_;Jan Horak <jhorak@redhat.com> - 115.9.1-2f-- Removed expat CVE fixHa3Eike Rathke <erack@redhat.com> - 115.9.1-1er- Update to 115.9.1OaAEike Rathke <erack@redhat.com> - 115.9.0-2e8@- Update to 115.9.0 build2jawEike Rathke <erack@redhat.com> - 115.9.0-1eC- Update to 115.9.0 build1
- Fix expat CVE-2023-52425OaAEike Rathke <erack@redhat.com> - 115.8.0-1eY- Update to 115.8.0 build1
K AT \
K O+aAEike Rathke <erack@redhat.com> - 115.9.0-2e8@- Update to 115.9.0 build2j*awEike Rathke <erack@redhat.com> - 115.9.0-1eC- Update to 115.9.0 build1
- Fix expat CVE-2023-52425O)aAEike Rathke <erack@redhat.com> - 115.8.0-1eY- Update to 115.8.0 build1O(aAEike Rathke <erack@redhat.com> - 115.7.0-1eo- Update to 115.7.0 build1O'aAEike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1Q&cCEike Rathke <erack@redhat.com> - 115.11.0-1f:- Update to 115.11.0 build1Q%cCEike Rathke <erack@redhat.com> - 115.10.0-1f-- Update to 115.10.0 build1K$_;Jan Horak <jhorak@redhat.com> - 115.9.1-2f-- Removed expat CVE fixH#a3Eike Rathke <erack@redhat.com> - 115.9.1-1er- Update to 115.9.1O"aAEike Rathke <erack@redhat.com> - 115.9.0-2e8@- Update to 115.9.0 build2j!awEike Rathke <erack@redhat.com> - 115.9.0-1eC- Update to 115.9.0 build1
- Fix expat CVE-2023-52425
k gku k H6a3Eike Rathke <erack@redhat.com> - 115.9.1-1er- Update to 115.9.1O5aAEike Rathke <erack@redhat.com> - 115.9.0-2e8@- Update to 115.9.0 build2j4awEike Rathke <erack@redhat.com> - 115.9.0-1eC- Update to 115.9.0 build1
- Fix expat CVE-2023-52425O3aAEike Rathke <erack@redhat.com> - 115.8.0-1eY- Update to 115.8.0 build1O2aAEike Rathke <erack@redhat.com> - 115.7.0-1eo- Update to 115.7.0 build1O1aAEike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1Q0cCEike Rathke <erack@redhat.com> - 115.12.0-1f_- Update to 115.12.0 build1Q/cCEike Rathke <erack@redhat.com> - 115.11.0-1f:- Update to 115.11.0 build1Q.cCEike Rathke <erack@redhat.com> - 115.10.0-1f-- Update to 115.10.0 build1K-_;Jan Horak <jhorak@redhat.com> - 115.9.1-2f-- Removed expat CVE fixH,a3Eike Rathke <erack@redhat.com> - 115.9.1-1er- Update to 115.9.1
^
b|. HAa3Eike Rathke <erack@redhat.com> - 115.3.1-1e@- Update to 115.3.1K@_;Jan Horak <jhorak@redhat.com> - 115.3.0-1e 0@- Update to 115.3.0 ESRK?_;Jan Horak <jhorak@redhat.com> - 115.2.0-3d- Update to 115.2.0 ESRK>_;Jan Horak <jhorak@redhat.com> - 115.1.0-1dE@- Update to 115.1.0 ESRK=_;Jan Horak <jhorak@redhat.com> - 115.0.2-1d-@- Update to 115.0.2 ESRG<_3Jan Horak <jhorak@redhat.com> - 115.0b8-1d@- Update to 115.0b8Q;cCEike Rathke <erack@redhat.com> - 102.11.0-2dS@- Update to 102.11.0 build2Q:cCEike Rathke <erack@redhat.com> - 115.12.0-1f_- Update to 115.12.0 build1Q9cCEike Rathke <erack@redhat.com> - 115.11.0-1f:- Update to 115.11.0 build1Q8cCEike Rathke <erack@redhat.com> - 115.10.0-1f-- Update to 115.10.0 build1K7_;Jan Horak <jhorak@redhat.com> - 115.9.1-2f-- Removed expat CVE fix
go%; HKa3Eike Rathke <erack@redhat.com> - 115.3.1-1e@- Update to 115.3.1KJ_;Jan Horak <jhorak@redhat.com> - 115.3.0-1e 0@- Update to 115.3.0 ESRKI_;Jan Horak <jhorak@redhat.com> - 115.2.0-3d- Update to 115.2.0 ESRKH_;Jan Horak <jhorak@redhat.com> - 115.1.0-1dE@- Update to 115.1.0 ESRKG_;Jan Horak <jhorak@redhat.com> - 115.0.2-1d-@- Update to 115.0.2 ESRGF_3Jan Horak <jhorak@redhat.com> - 115.0b8-1d@- Update to 115.0b8QEcCEike Rathke <erack@redhat.com> - 102.11.0-2dS@- Update to 102.11.0 build2ODaAEike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1OCaAEike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1BaKEike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URL
] gy+A ] UaKEike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URLHTa3Eike Rathke <erack@redhat.com> - 115.3.1-1e@- Update to 115.3.1KS_;Jan Horak <jhorak@redhat.com> - 115.3.0-1e 0@- Update to 115.3.0 ESRKR_;Jan Horak <jhorak@redhat.com> - 115.2.0-3d- Update to 115.2.0 ESRKQ_;Jan Horak <jhorak@redhat.com> - 115.1.0-1dE@- Update to 115.1.0 ESRKP_;Jan Horak <jhorak@redhat.com> - 115.0.2-1d-@- Update to 115.0.2 ESRGO_3Jan Horak <jhorak@redhat.com> - 115.0b8-1d@- Update to 115.0b8ONaAEike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1OMaAEike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1LaKEike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URL
R \
r$= R O`aAEike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1_aKEike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URLH^a3Eike Rathke <erack@redhat.com> - 115.3.1-1e@- Update to 115.3.1K]_;Jan Horak <jhorak@redhat.com> - 115.3.0-1e 0@- Update to 115.3.0 ESRK\_;Jan Horak <jhorak@redhat.com> - 115.2.0-3d- Update to 115.2.0 ESRK[_;Jan Horak <jhorak@redhat.com> - 115.1.0-1dE@- Update to 115.1.0 ESRKZ_;Jan Horak <jhorak@redhat.com> - 115.0.2-1d-@- Update to 115.0.2 ESRGY_3Jan Horak <jhorak@redhat.com> - 115.0b8-1d@- Update to 115.0b8OXaAEike Rathke <erack@redhat.com> - 115.7.0-1eo- Update to 115.7.0 build1OWaAEike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1OVaAEike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1
J \r$@ J OkaAEike Rathke <erack@redhat.com> - 115.7.0-1eo- Update to 115.7.0 build1OjaAEike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1OiaAEike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1haKEike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URLHga3Eike Rathke <erack@redhat.com> - 115.3.1-1e@- Update to 115.3.1Kf_;Jan Horak <jhorak@redhat.com> - 115.3.0-1e 0@- Update to 115.3.0 ESRKe_;Jan Horak <jhorak@redhat.com> - 115.2.0-3d- Update to 115.2.0 ESRKd_;Jan Horak <jhorak@redhat.com> - 115.1.0-1dE@- Update to 115.1.0 ESRKc_;Jan Horak <jhorak@redhat.com> - 115.0.2-1d-@- Update to 115.0.2 ESRObaAEike Rathke <erack@redhat.com> - 115.7.0-1eo- Update to 115.7.0 build1OaaAEike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1
J `v+@ J OvaAEike Rathke <erack@redhat.com> - 115.8.0-1eY- Update to 115.8.0 build1OuaAEike Rathke <erack@redhat.com> - 115.7.0-1eo- Update to 115.7.0 build1OtaAEike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1OsaAEike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1raKEike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URLHqa3Eike Rathke <erack@redhat.com> - 115.3.1-1e@- Update to 115.3.1Kp_;Jan Horak <jhorak@redhat.com> - 115.3.0-1e 0@- Update to 115.3.0 ESRKo_;Jan Horak <jhorak@redhat.com> - 115.2.0-3d- Update to 115.2.0 ESRKn_;Jan Horak <jhorak@redhat.com> - 115.1.0-1dE@- Update to 115.1.0 ESRKm_;Jan Horak <jhorak@redhat.com> - 115.0.2-1d-@- Update to 115.0.2 ESROlaAEike Rathke <erack@redhat.com> - 115.8.0-1eY- Update to 115.8.0 build1
e r+V: e D
7724d8a7b5c53b6b19107130e41d127672ad5e6814dd6d9cdf6130a27f22354bD
6a6db0a030199ad5a8e0edde0f8458ca5391f94ac4ccd7a93c3c186326026cc3D
d09bdd004c3fac87661119d619afb43d9ad9824ef8a2e58fa51c55f0211f12d9D
de58dba9cc8af79c110d13626931309529fa1a8782a121fbfc29dd03e58e58b6D
13154f5e2510e00d260ae211027b13f44ca11e49508ba2237ccccda2eea337b2D
fc48a72a9a0a8898553b10f1e151b5cb865e23d1ae5200c58cf22572c71ff6acD
a6fc6ceec2ef96703e31fadfc56988518eb77de39ff4fd2e69fa98b88e033dd7D
843fb795c9bf323f16859c41219123409abcc114812537da012befe15091fbc3D
6d8bf16512d109e75893de1fd5c3fff8aa8557a12556eccd6e6c8fbfd7f184adD
74e98e4966e80435f954bb2859be485730a97c3e547acc848d76d50f49af0329D
06de00e45a444bd8381c6526ee4a204b80511ebbca8c8b0b52bfd9d9bacec74cD
2f160bf3a57455fd82821ea858e6ab2789596f1ae502a2b3968383670f17296fD
33dd225ef7b01c077e7d0977782fa69f3d8fd4cea6363f4cde213cc37694b3a2
. g|* | . K_;Jan Horak <jhorak@redhat.com> - 115.3.0-1e 0@- Update to 115.3.0 ESRH a3 Eike Rathke <erack@redhat.com> - 115.9.1-1er- Update to 115.9.1OaA Eike Rathke <erack@redhat.com> - 115.9.0-2e8@- Update to 115.9.0 build2j~aw Eike Rathke <erack@redhat.com> - 115.9.0-1eC- Update to 115.9.0 build1
- Fix expat CVE-2023-52425O}aA Eike Rathke <erack@redhat.com> - 115.8.0-1eY- Update to 115.8.0 build1O|aA Eike Rathke <erack@redhat.com> - 115.7.0-1eo- Update to 115.7.0 build1O{aA Eike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1OzaA Eike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1yaK Eike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URLHxa3 Eike Rathke <erack@redhat.com> - 115.3.1-1e@- Update to 115.3.1Kw_; Jan Horak <jhorak@redhat.com> - 115.3.0-1e 0@- Update to 115.3.0 ESR
x&g H a3Eike Rathke <erack@redhat.com> - 115.3.1-1e@- Update to 115.3.1H
a3Eike Rathke <erack@redhat.com> - 115.9.1-1er- Update to 115.9.1O aAEike Rathke <erack@redhat.com> - 115.9.0-2e8@- Update to 115.9.0 build2jawEike Rathke <erack@redhat.com> - 115.9.0-1eC- Update to 115.9.0 build1
- Fix expat CVE-2023-52425OaAEike Rathke <erack@redhat.com> - 115.8.0-1eY- Update to 115.8.0 build1OaAEike Rathke <erack@redhat.com> - 115.7.0-1eo- Update to 115.7.0 build1OaAEike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1OaAEike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1aKEike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URLHa3Eike Rathke <erack@redhat.com> - 115.3.1-1e@- Update to 115.3.1
| gq ` | Ha3Eike Rathke <erack@redhat.com> - 115.3.1-1e@- Update to 115.3.1K_;Jan Horak <jhorak@redhat.com> - 115.9.1-2f-- Removed expat CVE fixHa3Eike Rathke <erack@redhat.com> - 115.9.1-1er- Update to 115.9.1OaAEike Rathke <erack@redhat.com> - 115.9.0-2e8@- Update to 115.9.0 build2jawEike Rathke <erack@redhat.com> - 115.9.0-1eC- Update to 115.9.0 build1
- Fix expat CVE-2023-52425OaAEike Rathke <erack@redhat.com> - 115.8.0-1eY- Update to 115.8.0 build1OaAEike Rathke <erack@redhat.com> - 115.7.0-1eo- Update to 115.7.0 build1OaAEike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1O
aAEike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1 aKEike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URL
7 gq ` 7 I ]9Jan Horak <jhorak@redhat.com> - 68.6.1-1^- Update to 68.6.1 ESRA G?Jan Horak <jhorak@redhat.com>^_@- Update to 68.6.0 build1K _;Jan Horak <jhorak@redhat.com> - 115.9.1-2f-- Removed expat CVE fixH a3Eike Rathke <erack@redhat.com> - 115.9.1-1er- Update to 115.9.1O aAEike Rathke <erack@redhat.com> - 115.9.0-2e8@- Update to 115.9.0 build2jawEike Rathke <erack@redhat.com> - 115.9.0-1eC- Update to 115.9.0 build1
- Fix expat CVE-2023-52425OaAEike Rathke <erack@redhat.com> - 115.8.0-1eY- Update to 115.8.0 build1OaAEike Rathke <erack@redhat.com> - 115.7.0-1eo- Update to 115.7.0 build1OaAEike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1OaAEike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1aKEike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URL
_ Wg"T _ W,mEMartin Stransky <stransky@redhat.com> - 68.7.0-3^@- Added fix for rhbz#1821418L+]?Jan Horak <jhorak@redhat.com> - 68.7.0-2^k@- Update to 68.7.0 build3I*]9Jan Horak <jhorak@redhat.com> - 68.6.1-1^- Update to 68.6.1 ESRA)G?Jan Horak <jhorak@redhat.com>^_@- Update to 68.6.0 build1B(GAJan Horak <jhorak@redhat.com>_>e- Update to 68.12.0 build1B'GAJan Horak <jhorak@redhat.com>_{- Update to 68.11.0 build1B&GAJan Horak <jhorak@redhat.com>^@- Update to 68.10.0 build1`%G}Jan Horak <jhorak@redhat.com>^@- Update to 68.9.0 build1
- Added patch for pipewire 0.3F$GIJan Horak <jhorak@redhat.com>^>@- Added s390x specific patchesA#G?Jan Horak <jhorak@redhat.com>^l@- Update to 68.8.0 build1W"mEMartin Stransky <stransky@redhat.com> - 68.7.0-3^@- Added fix for rhbz#1821418L!]?Jan Horak <jhorak@redhat.com> - 68.7.0-2^k@- Update to 68.7.0 build3
U sAS U [8]]Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM7_?Eike Rathke <erack@redhat.com> - 78.7.0-2`
@- Update to 78.7.0 build2M6_?Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M5_?Eike Rathke <erack@redhat.com> - 78.6.1-1_@- Update to 78.6.1 build1L4]?Jan Horak <jhorak@redhat.com> - 78.6.0-1_
- Update to 78.6.0 build1L3]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_ - Update to 78.5.0 build1B2GAJan Horak <jhorak@redhat.com>_>e- Update to 68.12.0 build1B1GAJan Horak <jhorak@redhat.com>_{- Update to 68.11.0 build1B0GAJan Horak <jhorak@redhat.com>^@- Update to 68.10.0 build1`/G}Jan Horak <jhorak@redhat.com>^@- Update to 68.9.0 build1
- Added patch for pipewire 0.3F.GIJan Horak <jhorak@redhat.com>^>@- Added s390x specific patchesA-G?Jan Horak <jhorak@redhat.com>^l@- Update to 68.8.0 build1
G g}.> G MD_?Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2FC_1Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[B]]Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageMA_?Eike Rathke <erack@redhat.com> - 78.7.0-2`
@- Update to 78.7.0 build2M@_?Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M?_?Eike Rathke <erack@redhat.com> - 78.6.1-1_@- Update to 78.6.1 build1L>]?Jan Horak <jhorak@redhat.com> - 78.6.0-1_
- Update to 78.6.0 build1L=]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_ - Update to 78.5.0 build1H<a3Eike Rathke <erack@redhat.com> - 78.10.0-1`~@- Update to 78.10.0M;_?Eike Rathke <erack@redhat.com> - 78.9.0-1`Q@- Update to 78.9.0 build1M:_?Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F9_1Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1
x eg ~3 x fOaoEike Rathke <erack@redhat.com> - 78.11.0-2`- Fix rhel_minor_version for dist .el8_4 and .el8ONaAEike Rathke <erack@redhat.com> - 78.11.0-1`- Update to 78.11.0 build1HMa3Eike Rathke <erack@redhat.com> - 78.10.0-1`~@- Update to 78.10.0ML_?Eike Rathke <erack@redhat.com> - 78.9.0-1`Q@- Update to 78.9.0 build1MK_?Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2FJ_1Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[I]]Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageMH_?Eike Rathke <erack@redhat.com> - 78.7.0-2`
@- Update to 78.7.0 build2MG_?Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1HFa3Eike Rathke <erack@redhat.com> - 78.10.0-1`~@- Update to 78.10.0ME_?Eike Rathke <erack@redhat.com> - 78.9.0-1`Q@- Update to 78.9.0 build1
[ T]
r [ YZaU Eike Rathke <erack@redhat.com> - 78.11.0-3`- Update to 78.11.0 build2 (release)fYao Eike Rathke <erack@redhat.com> - 78.11.0-2`- Fix rhel_minor_version for dist .el8_4 and .el8OXaA Eike Rathke <erack@redhat.com> - 78.11.0-1`- Update to 78.11.0 build1HWa3 Eike Rathke <erack@redhat.com> - 78.10.0-1`~@- Update to 78.10.0MV_? Eike Rathke <erack@redhat.com> - 78.9.0-1`Q@- Update to 78.9.0 build1MU_? Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2FT_1 Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[S]] Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageMR_? Eike Rathke <erack@redhat.com> - 78.7.0-2`
@- Update to 78.7.0 build2MQ_? Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1YPaUEike Rathke <erack@redhat.com> - 78.11.0-3`- Update to 78.11.0 build2 (release)
e R i c e Me_? Eike Rathke <erack@redhat.com> - 78.7.0-2`
@- Update to 78.7.0 build2OdaA
Eike Rathke <erack@redhat.com> - 78.12.0-1`@- Update to 78.12.0 build1YcaU
Eike Rathke <erack@redhat.com> - 78.11.0-3`- Update to 78.11.0 build2 (release)fbao
Eike Rathke <erack@redhat.com> - 78.11.0-2`- Fix rhel_minor_version for dist .el8_4 and .el8OaaA
Eike Rathke <erack@redhat.com> - 78.11.0-1`- Update to 78.11.0 build1H`a3
Eike Rathke <erack@redhat.com> - 78.10.0-1`~@- Update to 78.10.0M__?
Eike Rathke <erack@redhat.com> - 78.9.0-1`Q@- Update to 78.9.0 build1M^_?
Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F]_1
Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[\]]
Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM[_?
Eike Rathke <erack@redhat.com> - 78.7.0-2`
@- Update to 78.7.0 build2
e Y n W e Mp_? Eike Rathke <erack@redhat.com> - 78.9.0-1`Q@- Update to 78.9.0 build1Mo_? Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2OnaA Eike Rathke <erack@redhat.com> - 78.12.0-1`@- Update to 78.12.0 build1YmaU Eike Rathke <erack@redhat.com> - 78.11.0-3`- Update to 78.11.0 build2 (release)flao Eike Rathke <erack@redhat.com> - 78.11.0-2`- Fix rhel_minor_version for dist .el8_4 and .el8OkaA Eike Rathke <erack@redhat.com> - 78.11.0-1`- Update to 78.11.0 build1Hja3 Eike Rathke <erack@redhat.com> - 78.10.0-1`~@- Update to 78.10.0Mi_? Eike Rathke <erack@redhat.com> - 78.9.0-1`Q@- Update to 78.9.0 build1Mh_? Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2Fg_1 Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[f]] Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepage
i cLT i H{a3
Eike Rathke <erack@redhat.com> - 78.10.0-1`~@- Update to 78.10.0Mz_?
Eike Rathke <erack@redhat.com> - 78.9.0-1`Q@- Update to 78.9.0 build1My_?
Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2OxaA Eike Rathke <erack@redhat.com> - 78.13.0-2a - Update to 78.13.0 build2OwaA Eike Rathke <erack@redhat.com> - 78.13.0-1a /- Update to 78.13.0 build1Qv_G Jan Horak <jhorak@redhat.com> - 78.12.0-2`t- Rebuild to pickup older nssOuaA Eike Rathke <erack@redhat.com> - 78.12.0-1`@- Update to 78.12.0 build1YtaU Eike Rathke <erack@redhat.com> - 78.11.0-3`- Update to 78.11.0 build2 (release)fsao Eike Rathke <erack@redhat.com> - 78.11.0-2`- Fix rhel_minor_version for dist .el8_4 and .el8OraA Eike Rathke <erack@redhat.com> - 78.11.0-1`- Update to 78.11.0 build1Hqa3 Eike Rathke <erack@redhat.com> - 78.10.0-1`~@- Update to 78.10.0
e r+V: e D
b351574a459bf47d5aed5e921e49e33fc565cab9b3d72ce5cd6fefba1b6f83c9D
a64d622fd50cce3d3743013a5534e4fed4985139f60314ee23246e08601835cfD
765577455a2956ce537d4c4d5768286fbead171668c41853b5d6f0989dd4013cD
6ce9a07c50256531ba281b344b048ba26881b6d3612f2c4ee5f35d0801d8be57D
4276584eb593d2fb304ab50518d7e2c4f955abe8fc5b3d1b9f0dd053d363f298D
cb3a549fe050cd75184479500b542065e37366ce62d90769646352bf2d9798a2D
d8f95fca6716286e91c7ab7b9be9bd359800c870cc0bdb90128bf93397e9352dD
54c6e6aa53fe175c25dc35fe3f6476d9b195d85a4fc5e64d5625d1731cc5b1ceD
c95a549af2d83400b97e70bcf7ebf1fbbb8b58bb768c6f7761edc982d7326504D
06c9237d3d292ac356ab89dc89e2e9d7f41d6b52eaa838d872573cdeac93d2e7D
2a94cd35eaf2c096188c8f30e38bb1ae656122294b6b2f692f185e9533bf7f02D
4612dc1b815321d8acda2baafa9107d32d2e88453f1c98a341c59936db87f826D
64a964dbf122edcb897186c8824b60976d45bd7ddce017d938404771e1396a1e
I ECO I faoEike Rathke <erack@redhat.com> - 78.11.0-2`- Fix rhel_minor_version for dist .el8_4 and .el8OaAEike Rathke <erack@redhat.com> - 78.11.0-1`- Update to 78.11.0 build1Ha3Eike Rathke <erack@redhat.com> - 78.10.0-1`~@- Update to 78.10.0M_?Eike Rathke <erack@redhat.com> - 78.9.0-1`Q@- Update to 78.9.0 build1OaA
Eike Rathke <erack@redhat.com> - 78.13.0-2a - Update to 78.13.0 build2OaA
Eike Rathke <erack@redhat.com> - 78.13.0-1a /- Update to 78.13.0 build1Q _G
Jan Horak <jhorak@redhat.com> - 78.12.0-2`t- Rebuild to pickup older nssOaA
Eike Rathke <erack@redhat.com> - 78.12.0-1`@- Update to 78.12.0 build1Y~aU
Eike Rathke <erack@redhat.com> - 78.11.0-3`- Update to 78.11.0 build2 (release)f}ao
Eike Rathke <erack@redhat.com> - 78.11.0-2`- Fix rhel_minor_version for dist .el8_4 and .el8O|aA
Eike Rathke <erack@redhat.com> - 78.11.0-1`- Update to 78.11.0 build1
V RZm V YaUEike Rathke <erack@redhat.com> - 78.11.0-3`- Update to 78.11.0 build2 (release)faoEike Rathke <erack@redhat.com> - 78.11.0-2`- Fix rhel_minor_version for dist .el8_4 and .el8OaAEike Rathke <erack@redhat.com> - 78.11.0-1`- Update to 78.11.0 build1Ha3Eike Rathke <erack@redhat.com> - 78.10.0-1`~@- Update to 78.10.0M
_?Eike Rathke <erack@redhat.com> - 78.9.0-1`Q@- Update to 78.9.0 build1O aAEike Rathke <erack@redhat.com> - 78.14.0-1a0- Update to 78.14.0 build1O aAEike Rathke <erack@redhat.com> - 78.13.0-2a - Update to 78.13.0 build2O
aAEike Rathke <erack@redhat.com> - 78.13.0-1a /- Update to 78.13.0 build1Q _GJan Horak <jhorak@redhat.com> - 78.12.0-2`t- Rebuild to pickup older nssOaAEike Rathke <erack@redhat.com> - 78.12.0-1`@- Update to 78.12.0 build1YaUEike Rathke <erack@redhat.com> - 78.11.0-3`- Update to 78.11.0 build2 (release)
A Zdw. A B GAJan Horak <jhorak@redhat.com>_@- Update to 68.11.0 build1B GAJan Horak <jhorak@redhat.com>^@- Update to 68.10.0 build1`G}Jan Horak <jhorak@redhat.com>^@- Update to 68.9.0 build1
- Added patch for pipewire 0.3FGIJan Horak <jhorak@redhat.com>^>@- Added s390x specific patchesAG?Jan Horak <jhorak@redhat.com>^l@- Update to 68.8.0 build1WmEMartin Stransky <stransky@redhat.com> - 68.7.0-3^@- Added fix for rhbz#1821418L]?Jan Horak <jhorak@redhat.com> - 68.7.0-2^k@- Update to 68.7.0 build3OaAEike Rathke <erack@redhat.com> - 78.14.0-1a0- Update to 78.14.0 build1OaAEike Rathke <erack@redhat.com> - 78.13.0-2a - Update to 78.13.0 build2OaAEike Rathke <erack@redhat.com> - 78.13.0-1a /- Update to 78.13.0 build1Q_GJan Horak <jhorak@redhat.com> - 78.12.0-2`t- Rebuild to pickup older nssOaAEike Rathke <erack@redhat.com> - 78.12.0-1`@- Update to 78.12.0 build1
h m u1@ h A)G?Jan Horak <jhorak@redhat.com>_d@- Update to 78.3.0 build1L(]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;- Update to 78.2.0 build1B'GAJan Horak <jhorak@redhat.com>_@- Update to 68.11.0 build1B&GAJan Horak <jhorak@redhat.com>^@- Update to 68.10.0 build1`%G}Jan Horak <jhorak@redhat.com>^@- Update to 68.9.0 build1
- Added patch for pipewire 0.3F$GIJan Horak <jhorak@redhat.com>^>@- Added s390x specific patchesA#G?Jan Horak <jhorak@redhat.com>^l@- Update to 68.8.0 build1W"mEMartin Stransky <stransky@redhat.com> - 68.7.0-3^@- Added fix for rhbz#1821418L!]?Jan Horak <jhorak@redhat.com> - 68.7.0-2^k@- Update to 68.7.0 build3L ]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_@- Update to 78.4.0 build2A G?Jan Horak <jhorak@redhat.com>_d@- Update to 78.3.0 build1L ]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;- Update to 78.2.0 build1
& h{,I o & F5GIJan Horak <jhorak@redhat.com>^>@- Added s390x specific patchesR4Ceerack@redhat.com - 78.4.1-1_- Update to 78.4.1
- Filtering nss/nspr libs3]'Jan Horak <jhorak@redhat.com> - 78.4.0-3_- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM2]AJan Horak <jhorak@redhat.com> - 78.4.0-2_- Enable addon sideloadingL1]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_@- Update to 78.4.0 build2A0G?Jan Horak <jhorak@redhat.com>_d@- Update to 78.3.0 build1L/]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;- Update to 78.2.0 build1B.GAJan Horak <jhorak@redhat.com>_@- Update to 68.11.0 build1B-GAJan Horak <jhorak@redhat.com>^@- Update to 68.10.0 build1`,G}Jan Horak <jhorak@redhat.com>^@- Update to 68.9.0 build1
- Added patch for pipewire 0.3F+GIJan Horak <jhorak@redhat.com>^>@- Added s390x specific patchesL*]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_@- Update to 78.4.0 build2
_ X1\ _ B@GAJan Horak <jhorak@redhat.com>^@- Update to 68.10.0 build1`?G}Jan Horak <jhorak@redhat.com>^@- Update to 68.9.0 build1
- Added patch for pipewire 0.3R>Ceerack@redhat.com - 78.4.1-1_- Update to 78.4.1
- Filtering nss/nspr libs=]'Jan Horak <jhorak@redhat.com> - 78.4.0-3_- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM<]AJan Horak <jhorak@redhat.com> - 78.4.0-2_- Enable addon sideloadingL;]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_@- Update to 78.4.0 build2A:G?Jan Horak <jhorak@redhat.com>_d@- Update to 78.3.0 build1L9]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;- Update to 78.2.0 build1B8GAJan Horak <jhorak@redhat.com>_@- Update to 68.11.0 build1B7GAJan Horak <jhorak@redhat.com>^@- Update to 68.10.0 build1`6G}Jan Horak <jhorak@redhat.com>^@- Update to 68.9.0 build1
- Added patch for pipewire 0.3
> l(z > LL]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;- Update to 78.2.0 build1BKGAJan Horak <jhorak@redhat.com>_@- Update to 68.11.0 build1BJGAJan Horak <jhorak@redhat.com>^@- Update to 68.10.0 build1`IG}Jan Horak <jhorak@redhat.com>^@- Update to 68.9.0 build1
- Added patch for pipewire 0.3LH]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_ - Update to 78.5.0 build18GC1erack@redhat.com - 78.4.1-1_- Update to 78.4.1F]'Jan Horak <jhorak@redhat.com> - 78.4.0-3_- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingME]AJan Horak <jhorak@redhat.com> - 78.4.0-2_- Enable addon sideloadingLD]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_@- Update to 78.4.0 build2ACG?Jan Horak <jhorak@redhat.com>_d@- Update to 78.3.0 build1LB]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;- Update to 78.2.0 build1BAGAJan Horak <jhorak@redhat.com>_@- Update to 68.11.0 build1
R m ]5 R MX]AJan Horak <jhorak@redhat.com> - 78.4.0-2_- Enable addon sideloadingLW]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_@- Update to 78.4.0 build2AVG?Jan Horak <jhorak@redhat.com>_d@- Update to 78.3.0 build1LU]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;- Update to 78.2.0 build1BTGAJan Horak <jhorak@redhat.com>_@- Update to 68.11.0 build1BSGAJan Horak <jhorak@redhat.com>^@- Update to 68.10.0 build1LR]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_ - Update to 78.5.0 build18QC1erack@redhat.com - 78.4.1-1_- Update to 78.4.1P]'Jan Horak <jhorak@redhat.com> - 78.4.0-3_- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingMO]AJan Horak <jhorak@redhat.com> - 78.4.0-2_- Enable addon sideloadingLN]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_@- Update to 78.4.0 build2AMG?Jan Horak <jhorak@redhat.com>_d@- Update to 78.3.0 build1
& {@]6 a & 8dC1erack@redhat.com - 78.4.1-1_- Update to 78.4.1c]'Jan Horak <jhorak@redhat.com> - 78.4.0-3_- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingMb]AJan Horak <jhorak@redhat.com> - 78.4.0-2_- Enable addon sideloadingLa]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_@- Update to 78.4.0 build2A`G?Jan Horak <jhorak@redhat.com>_d@- Update to 78.3.0 build1L_]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;- Update to 78.2.0 build1B^GAJan Horak <jhorak@redhat.com>_@- Update to 68.11.0 build1B]GAJan Horak <jhorak@redhat.com>^@- Update to 68.10.0 build1L\]?Jan Horak <jhorak@redhat.com> - 78.6.0-1_
- Update to 78.6.0 build1L[]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_ - Update to 78.5.0 build18ZC1erack@redhat.com - 78.4.1-1_- Update to 78.4.1Y]'Jan Horak <jhorak@redhat.com> - 78.4.0-3_- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loading
= b ;f+ = Mp_?Eike Rathke <erack@redhat.com> - 78.6.1-1_@- Update to 78.6.1 build1Lo]?Jan Horak <jhorak@redhat.com> - 78.6.0-1_
- Update to 78.6.0 build1Ln]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_ - Update to 78.5.0 build18mC1erack@redhat.com - 78.4.1-1_- Update to 78.4.1l]'Jan Horak <jhorak@redhat.com> - 78.4.0-3_- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingMk]AJan Horak <jhorak@redhat.com> - 78.4.0-2_- Enable addon sideloadingLj]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_@- Update to 78.4.0 build2AiG?Jan Horak <jhorak@redhat.com>_d@- Update to 78.3.0 build1Lh]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;- Update to 78.2.0 build1BgGAJan Horak <jhorak@redhat.com>_@- Update to 68.11.0 build1Lf]?Jan Horak <jhorak@redhat.com> - 78.6.0-1_
- Update to 78.6.0 build1Le]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_ - Update to 78.5.0 build1
H l(z+ H L|]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_@- Update to 78.4.0 build2A{G?Jan Horak <jhorak@redhat.com>_d@- Update to 78.3.0 build1Mz_?Eike Rathke <erack@redhat.com> - 78.6.1-1_@- Update to 78.6.1 build1Ly]?Jan Horak <jhorak@redhat.com> - 78.6.0-1_
- Update to 78.6.0 build1Lx]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_ - Update to 78.5.0 build18wC1erack@redhat.com - 78.4.1-1_- Update to 78.4.1v]'Jan Horak <jhorak@redhat.com> - 78.4.0-3_- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingMu]AJan Horak <jhorak@redhat.com> - 78.4.0-2_- Enable addon sideloadingLt]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_@- Update to 78.4.0 build2AsG?Jan Horak <jhorak@redhat.com>_d@- Update to 78.3.0 build1Lr]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;- Update to 78.2.0 build1BqGAJan Horak <jhorak@redhat.com>_@- Update to 68.11.0 build1
e r+V: e D&
6d7bcceec43abb616cbffadcf76d1c208a4f658a0625d17e0b0315b3e5a4c252D%
e063c651b9c19f3ff44c19dafd53594a57c6c58f609c5e0e419a4b724c4b5f87D$
40f292198cfd1d640409908c391eac750a799c0007158bd95505cc00794862e8D#
3430976f8acda648d8659eecbc9ab33a1dcb14139a6206b64b25c7a1129d685eD"
49a94cfaa934548d43b739e469156d5cbf8467609c08c9d7583ecd18912a49b7D!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 M]AJan Horak <jhorak@redhat.com> - 78.4.0-2_- Enable addon sideloadingL]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_@- Update to 78.4.0 build2AG?Jan Horak <jhorak@redhat.com>_d@- Update to 78.3.0 build1M_?Eike Rathke <erack@redhat.com> - 78.7.0-2`
@- Update to 78.7.0 build2M_?Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M_?Eike Rathke <erack@redhat.com> - 78.6.1-1_@- Update to 78.6.1 build1L]?Jan Horak <jhorak@redhat.com> - 78.6.0-1_
- Update to 78.6.0 build1L ]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_ - Update to 78.5.0 build18C1erack@redhat.com - 78.4.1-1_- Update to 78.4.1~]'Jan Horak <jhorak@redhat.com> - 78.4.0-3_- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM}]AJan Horak <jhorak@redhat.com> - 78.4.0-2_- Enable addon sideloading
T {@R- T L]? Jan Horak <jhorak@redhat.com> - 78.6.0-1_
- Update to 78.6.0 build1L]? Jan Horak <jhorak@redhat.com> - 78.5.0-1_ - Update to 78.5.0 build18C1 erack@redhat.com - 78.4.1-1_- Update to 78.4.1]' Jan Horak <jhorak@redhat.com> - 78.4.0-3_- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM_?Eike Rathke <erack@redhat.com> - 78.7.0-2`
@- Update to 78.7.0 build2M
_?Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M _?Eike Rathke <erack@redhat.com> - 78.6.1-1_@- Update to 78.6.1 build1L ]?Jan Horak <jhorak@redhat.com> - 78.6.0-1_
- Update to 78.6.0 build1L
]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_ - Update to 78.5.0 build18 C1erack@redhat.com - 78.4.1-1_- Update to 78.4.1]'Jan Horak <jhorak@redhat.com> - 78.4.0-3_- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loading
k `iY
k M _? Eike Rathke <erack@redhat.com> - 78.6.1-1_@- Update to 78.6.1 build1L ]? Jan Horak <jhorak@redhat.com> - 78.6.0-1_
- Update to 78.6.0 build1L]? Jan Horak <jhorak@redhat.com> - 78.5.0-1_ - Update to 78.5.0 build18C1 erack@redhat.com - 78.4.1-1_- Update to 78.4.1]' Jan Horak <jhorak@redhat.com> - 78.4.0-3_- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM_? Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F_1 Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[]] Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM_? Eike Rathke <erack@redhat.com> - 78.7.0-2`
@- Update to 78.7.0 build2M_? Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M_? Eike Rathke <erack@redhat.com> - 78.6.1-1_@- Update to 78.6.1 build1
B `i.@ B [)]] Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM(_? Eike Rathke <erack@redhat.com> - 78.7.0-2`
@- Update to 78.7.0 build2M'_? Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M&_? Eike Rathke <erack@redhat.com> - 78.6.1-1_@- Update to 78.6.1 build1L%]? Jan Horak <jhorak@redhat.com> - 78.6.0-1_
- Update to 78.6.0 build1L$]? Jan Horak <jhorak@redhat.com> - 78.5.0-1_ - Update to 78.5.0 build18#C1 erack@redhat.com - 78.4.1-1_- Update to 78.4.1M"_? Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F!_1 Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[ ]] Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM _? Eike Rathke <erack@redhat.com> - 78.7.0-2`
@- Update to 78.7.0 build2M _? Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1
W g>N W M5_? Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F4_1 Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[3]] Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM2_? Eike Rathke <erack@redhat.com> - 78.7.0-2`
@- Update to 78.7.0 build2M1_? Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M0_? Eike Rathke <erack@redhat.com> - 78.6.1-1_@- Update to 78.6.1 build1L/]? Jan Horak <jhorak@redhat.com> - 78.6.0-1_
- Update to 78.6.0 build1L.]? Jan Horak <jhorak@redhat.com> - 78.5.0-1_ - Update to 78.5.0 build18-C1 erack@redhat.com - 78.4.1-1_- Update to 78.4.1M,_? Eike Rathke <erack@redhat.com> - 78.9.0-1`Q@- Update to 78.9.0 build1M+_? Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F*_1 Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1
> %Co > L?]? Jan Horak <jhorak@redhat.com> - 91.9.1-1b- Update to 91.9.1 build1F>_1 Eike Rathke <erack@redhat.com> - 91.9.0-1bg- Update to 91.9.0F=_1 Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M<_? Eike Rathke <erack@redhat.com> - 91.7.0-3b%- Update to 91.7.0 build3 ;]% Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M:_? Eike Rathke <erack@redhat.com> - 91.7.0-1b
- Update to 91.7.0 build29]A Jan Horak <jhorak@redhat.com> - 91.6.0-2b- Install langpacks to the browser/extensions to make them available in UI:
rhbz#2030190M8_? Eike Rathke <erack@redhat.com> - 91.6.0-1arA- Update to 91.6.0 build17]3 Jan Horak <jhorak@redhat.com> - 91.5.0-2ar@- Use default update channel to fix non working enterprise policies:
rhbz#2044667M6_? Eike Rathke <erack@redhat.com> - 78.9.0-1`Q@- Update to 78.9.0 build1
< #Am < LI]?!Jan Horak <jhorak@redhat.com> - 91.9.1-1b- Update to 91.9.1 build1FH_1!Eike Rathke <erack@redhat.com> - 91.9.0-1bg- Update to 91.9.0FG_1!Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0MF_?!Eike Rathke <erack@redhat.com> - 91.7.0-3b%- Update to 91.7.0 build3 E]%!Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315MD_?!Eike Rathke <erack@redhat.com> - 91.7.0-1b
- Update to 91.7.0 build2C]A!Jan Horak <jhorak@redhat.com> - 91.6.0-2b- Install langpacks to the browser/extensions to make them available in UI:
rhbz#2030190MB_?!Eike Rathke <erack@redhat.com> - 91.6.0-1arA- Update to 91.6.0 build1A]3!Jan Horak <jhorak@redhat.com> - 91.5.0-2ar@- Use default update channel to fix non working enterprise policies:
rhbz#2044667O@aA Eike Rathke <erack@redhat.com> - 91.10.0-1b- Update to 91.10.0 build1
! Hf s ! OTaA"Eike Rathke <erack@redhat.com> - 91.11.0-2bU- Update to 91.11.0 build2OSaA"Eike Rathke <erack@redhat.com> - 91.11.0-1b- Update to 91.11.0 build1ORaA"Eike Rathke <erack@redhat.com> - 91.10.0-1b- Update to 91.10.0 build1LQ]?"Jan Horak <jhorak@redhat.com> - 91.9.1-1b- Update to 91.9.1 build1FP_1"Eike Rathke <erack@redhat.com> - 91.9.0-1bg- Update to 91.9.0FO_1"Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0MN_?"Eike Rathke <erack@redhat.com> - 91.7.0-3b%- Update to 91.7.0 build3 M]%"Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315ML_?"Eike Rathke <erack@redhat.com> - 91.7.0-1b
- Update to 91.7.0 build2K]A"Jan Horak <jhorak@redhat.com> - 91.6.0-2b- Install langpacks to the browser/extensions to make them available in UI:
rhbz#2030190OJaA!Eike Rathke <erack@redhat.com> - 91.10.0-1b- Update to 91.10.0 build1
# n Ji s # M__?$Eike Rathke <erack@redhat.com> - 91.7.0-1b
- Update to 91.7.0 build2O^aA#Eike Rathke <erack@redhat.com> - 91.11.0-2bU- Update to 91.11.0 build2O]aA#Eike Rathke <erack@redhat.com> - 91.11.0-1b- Update to 91.11.0 build1O\aA#Eike Rathke <erack@redhat.com> - 91.10.0-1b- Update to 91.10.0 build1L[]?#Jan Horak <jhorak@redhat.com> - 91.9.1-1b- Update to 91.9.1 build1FZ_1#Eike Rathke <erack@redhat.com> - 91.9.0-1bg- Update to 91.9.0FY_1#Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0MX_?#Eike Rathke <erack@redhat.com> - 91.7.0-3b%- Update to 91.7.0 build3 W]%#Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315MV_?#Eike Rathke <erack@redhat.com> - 91.7.0-1b
- Update to 91.7.0 build2U]A#Jan Horak <jhorak@redhat.com> - 91.6.0-2b- Install langpacks to the browser/extensions to make them available in UI:
rhbz#2030190
/ |,KU / j]%%Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315Mi_?%Eike Rathke <erack@redhat.com> - 91.7.0-1b
- Update to 91.7.0 build2OhaA$Eike Rathke <erack@redhat.com> - 91.12.0-1b?- Update to 91.12.0 build1OgaA$Eike Rathke <erack@redhat.com> - 91.11.0-2bU- Update to 91.11.0 build2OfaA$Eike Rathke <erack@redhat.com> - 91.11.0-1b- Update to 91.11.0 build1OeaA$Eike Rathke <erack@redhat.com> - 91.10.0-1b- Update to 91.10.0 build1Ld]?$Jan Horak <jhorak@redhat.com> - 91.9.1-1b- Update to 91.9.1 build1Fc_1$Eike Rathke <erack@redhat.com> - 91.9.0-1bg- Update to 91.9.0Fb_1$Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0Ma_?$Eike Rathke <erack@redhat.com> - 91.7.0-3b%- Update to 91.7.0 build3 `]%$Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315
! g }+ j ! Fv_1&Eike Rathke <erack@redhat.com> - 91.9.0-1bg- Update to 91.9.0Fu_1&Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0Mt_?&Eike Rathke <erack@redhat.com> - 91.7.0-3b%- Update to 91.7.0 build3 s]%&Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315OraA%Eike Rathke <erack@redhat.com> - 91.12.0-1b?- Update to 91.12.0 build1OqaA%Eike Rathke <erack@redhat.com> - 91.11.0-2bU- Update to 91.11.0 build2OpaA%Eike Rathke <erack@redhat.com> - 91.11.0-1b- Update to 91.11.0 build1OoaA%Eike Rathke <erack@redhat.com> - 91.10.0-1b- Update to 91.10.0 build1Ln]?%Jan Horak <jhorak@redhat.com> - 91.9.1-1b- Update to 91.9.1 build1Fm_1%Eike Rathke <erack@redhat.com> - 91.9.0-1bg- Update to 91.9.0Fl_1%Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0Mk_?%Eike Rathke <erack@redhat.com> - 91.7.0-3b%- Update to 91.7.0 build3
b _
iC b L]?'Jan Horak <jhorak@redhat.com> - 91.9.1-1b- Update to 91.9.1 build1F _1'Eike Rathke <erack@redhat.com> - 91.9.0-1bg- Update to 91.9.0F_1'Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M~_?'Eike Rathke <erack@redhat.com> - 91.7.0-3b%- Update to 91.7.0 build3 }]%'Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315O|aA&Eike Rathke <erack@redhat.com> - 91.13.0-1b@- Update to 91.13.0 build1O{aA&Eike Rathke <erack@redhat.com> - 91.12.0-1b?- Update to 91.12.0 build1OzaA&Eike Rathke <erack@redhat.com> - 91.11.0-2bU- Update to 91.11.0 build2OyaA&Eike Rathke <erack@redhat.com> - 91.11.0-1b- Update to 91.11.0 build1OxaA&Eike Rathke <erack@redhat.com> - 91.10.0-1b- Update to 91.10.0 build1Lw]?&Jan Horak <jhorak@redhat.com> - 91.9.1-1b- Update to 91.9.1 build1
e r+V: e D3
0b48a1dc6bd965ac5f800c44cf498da51c5fd0ec07bf16a07911d66f89932c4bD2
078df219eb34b52cef5f93c17533da34f2eceaec30e85da8944716d38dfee196D1
61eb1f5291daee31b9568e4897e13e2fa0260d850c62490f336ee5f55b31703bD0
f9138cc0c8bd84737691daa9f6f8f6914ee52bef60ec7862c2921c8d8743faa7D/
42e22ddc4f5145c86fda06a008ba1415e8c40c3caa32ca21f81ce460fa3e2bf5D.
d84e36f29bdfc3258ea945056512bc5478db08e97bee521c8debc13bb0e514b1D-
903e1d0ede27725fa4cc5c201b48de10f5cbd5f90594a9cb1c3a7e06037b2fe0D,
8c0eff6015d46baf10cb337069eb8d7100741d665dddd559e9e053509293cad7D+
6d5b1649b1e98557b5173af9108f9a86fc71dcf1bec82baed2b16dc82c6491d4D*
91c597c3c15155bea7576d423bb897ce5644669e24f2b918fb694fe845700c49D)
524031feb4b382103cd67a6e7a15219524577b7af9ecf3f8b7e5ca443bb043aaD(
c472916040722df81c63f7a4b84001545fcde6fe7ff88a7d90493dac79e09626D'
97afe94345fd3c005c2618f3f48fcbae76e8b91619f9bfe40ec51d70d2b90c75
) \
fO m ) A
G?(Jan Horak <jhorak@redhat.com>a- Update to 91.0.1 build1E Y5(Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC Y1(Jan Horak <jhorak@redhat.com> - 91.0-1a@- Update to 91.0b8Q
_G(Jan Horak <jhorak@redhat.com> - 78.12.0-2`t- Rebuild to pickup older nssO aA(Eike Rathke <erack@redhat.com> - 78.12.0-1`@- Update to 78.12.0 build1YaU(Eike Rathke <erack@redhat.com> - 78.11.0-3`- Update to 78.11.0 build2 (release)fao(Eike Rathke <erack@redhat.com> - 78.11.0-2`- Fix rhel_minor_version for dist .el8_4 and .el8OaA'Eike Rathke <erack@redhat.com> - 91.13.0-1b@- Update to 91.13.0 build1OaA'Eike Rathke <erack@redhat.com> - 91.12.0-1b?- Update to 91.12.0 build1OaA'Eike Rathke <erack@redhat.com> - 91.11.0-2bU- Update to 91.11.0 build2OaA'Eike Rathke <erack@redhat.com> - 91.11.0-1b- Update to 91.11.0 build1OaA'Eike Rathke <erack@redhat.com> - 91.10.0-1b- Update to 91.10.0 build1
] b$~8 ] L]?)Jan Horak <jhorak@redhat.com> - 91.1.0-1aA@- Update to 91.1.0 build1AG?)Jan Horak <jhorak@redhat.com>a- Update to 91.0.1 build1EY5)Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRCY1)Jan Horak <jhorak@redhat.com> - 91.0-1a@- Update to 91.0b8Q_G)Jan Horak <jhorak@redhat.com> - 78.12.0-2`t- Rebuild to pickup older nssOaA)Eike Rathke <erack@redhat.com> - 78.12.0-1`@- Update to 78.12.0 build1YaU)Eike Rathke <erack@redhat.com> - 78.11.0-3`- Update to 78.11.0 build2 (release)fao)Eike Rathke <erack@redhat.com> - 78.11.0-2`- Fix rhel_minor_version for dist .el8_4 and .el8v](Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ- Disable webrender on the s390x due to wrong colors: rhbz#2009503L]?(Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L]?(Jan Horak <jhorak@redhat.com> - 91.1.0-1aA@- Update to 91.1.0 build1
N 8Lq" N X#]W*Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.v"]*Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ- Disable webrender on the s390x due to wrong colors: rhbz#2009503L!]?*Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L ]?*Jan Horak <jhorak@redhat.com> - 91.1.0-1aA@- Update to 91.1.0 build1A G?*Jan Horak <jhorak@redhat.com>a- Update to 91.0.1 build1E Y5*Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC Y1*Jan Horak <jhorak@redhat.com> - 91.0-1a@- Update to 91.0b8Q _G*Jan Horak <jhorak@redhat.com> - 78.12.0-2`t- Rebuild to pickup older nssOaA*Eike Rathke <erack@redhat.com> - 78.12.0-1`@- Update to 78.12.0 build1v])Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ- Disable webrender on the s390x due to wrong colors: rhbz#2009503L]?)Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1
" ^
|8! v " Q/_G,Jan Horak <jhorak@redhat.com> - 78.12.0-2`t- Rebuild to pickup older nssM._?+Eike Rathke <erack@redhat.com> - 91.3.0-1a- Update to 91.3.0 build1X-]W+Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.v,]+Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ- Disable webrender on the s390x due to wrong colors: rhbz#2009503L+]?+Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L*]?+Jan Horak <jhorak@redhat.com> - 91.1.0-1aA@- Update to 91.1.0 build1A)G?+Jan Horak <jhorak@redhat.com>a- Update to 91.0.1 build1E(Y5+Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC'Y1+Jan Horak <jhorak@redhat.com> - 91.0-1a@- Update to 91.0b8Q&_G+Jan Horak <jhorak@redhat.com> - 78.12.0-2`t- Rebuild to pickup older nssO%aA+Eike Rathke <erack@redhat.com> - 78.12.0-1`@- Update to 78.12.0 build1M$_?*Eike Rathke <erack@redhat.com> - 91.3.0-1a- Update to 91.3.0 build1
: r.l : E;Y5-Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC:Y1-Jan Horak <jhorak@redhat.com> - 91.0-1a@- Update to 91.0b8Q9_G-Jan Horak <jhorak@redhat.com> - 78.12.0-2`t- Rebuild to pickup older nssM8_?,Eike Rathke <erack@redhat.com> - 91.4.0-1ac- Update to 91.4.0 build1M7_?,Eike Rathke <erack@redhat.com> - 91.3.0-1a- Update to 91.3.0 build1X6]W,Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.v5],Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ- Disable webrender on the s390x due to wrong colors: rhbz#2009503L4]?,Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L3]?,Jan Horak <jhorak@redhat.com> - 91.1.0-1aA@- Update to 91.1.0 build1A2G?,Jan Horak <jhorak@redhat.com>a- Update to 91.0.1 build1E1Y5,Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC0Y1,Jan Horak <jhorak@redhat.com> - 91.0-1a@- Update to 91.0b8
: m Jd : LG]?.Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1LF]?.Jan Horak <jhorak@redhat.com> - 91.1.0-1aA@- Update to 91.1.0 build1AEG?.Jan Horak <jhorak@redhat.com>a- Update to 91.0.1 build1EDY5.Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRCCY1.Jan Horak <jhorak@redhat.com> - 91.0-1a@- Update to 91.0b8MB_?-Eike Rathke <erack@redhat.com> - 91.4.0-1ac- Update to 91.4.0 build1MA_?-Eike Rathke <erack@redhat.com> - 91.3.0-1a- Update to 91.3.0 build1X@]W-Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.v?]-Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ- Disable webrender on the s390x due to wrong colors: rhbz#2009503L>]?-Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L=]?-Jan Horak <jhorak@redhat.com> - 91.1.0-1aA@- Update to 91.1.0 build1A<G?-Jan Horak <jhorak@redhat.com>a- Update to 91.0.1 build1
S ,<j S vR]/Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ- Disable webrender on the s390x due to wrong colors: rhbz#2009503LQ]?/Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1LP]?/Jan Horak <jhorak@redhat.com> - 91.1.0-1aA@- Update to 91.1.0 build1AOG?/Jan Horak <jhorak@redhat.com>a- Update to 91.0.1 build1ENY5/Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRCMY1/Jan Horak <jhorak@redhat.com> - 91.0-1a@- Update to 91.0b8ML_?.Eike Rathke <erack@redhat.com> - 91.5.0-1a- Update to 91.5.0 build1MK_?.Eike Rathke <erack@redhat.com> - 91.4.0-1ac- Update to 91.4.0 build1MJ_?.Eike Rathke <erack@redhat.com> - 91.3.0-1a- Update to 91.3.0 build1XI]W.Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.vH].Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ- Disable webrender on the s390x due to wrong colors: rhbz#2009503
C UfC C ]]]a0Jan Horak <jhorak@redhat.com> - 91.4.0-2a5- Added fix for failing addons signatures.M\_?0Eike Rathke <erack@redhat.com> - 91.4.0-1ac- Update to 91.4.0 build1M[_?0Eike Rathke <erack@redhat.com> - 91.3.0-1a- Update to 91.3.0 build1XZ]W0Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.vY]0Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ- Disable webrender on the s390x due to wrong colors: rhbz#2009503LX]?0Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1LW]?0Jan Horak <jhorak@redhat.com> - 91.1.0-1aA@- Update to 91.1.0 build1MV_?/Eike Rathke <erack@redhat.com> - 91.5.0-1a- Update to 91.5.0 build1MU_?/Eike Rathke <erack@redhat.com> - 91.4.0-1ac- Update to 91.4.0 build1MT_?/Eike Rathke <erack@redhat.com> - 91.3.0-1a- Update to 91.3.0 build1XS]W/Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.
c %7c c ]g]a1Jan Horak <jhorak@redhat.com> - 91.4.0-2a5- Added fix for failing addons signatures.Mf_?1Eike Rathke <erack@redhat.com> - 91.4.0-1ac- Update to 91.4.0 build1Me_?1Eike Rathke <erack@redhat.com> - 91.3.0-1a- Update to 91.3.0 build1Xd]W1Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.vc]1Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ- Disable webrender on the s390x due to wrong colors: rhbz#2009503Lb]?1Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1La]?1Jan Horak <jhorak@redhat.com> - 91.1.0-1aA@- Update to 91.1.0 build1M`_?0Eike Rathke <erack@redhat.com> - 91.6.0-1arA- Update to 91.6.0 build1_]30Jan Horak <jhorak@redhat.com> - 91.5.0-2ar@- Use default update channel to fix non working enterprise policies:
rhbz#2044667M^_?0Eike Rathke <erack@redhat.com> - 91.5.0-1a- Update to 91.5.0 build1
%5 Mp_?2Eike Rathke <erack@redhat.com> - 91.6.0-1arA- Update to 91.6.0 build1o]32Jan Horak <jhorak@redhat.com> - 91.5.0-2ar@- Use default update channel to fix non working enterprise policies:
rhbz#2044667Mn_?2Eike Rathke <erack@redhat.com> - 91.5.0-1a- Update to 91.5.0 build1]m]a2Jan Horak <jhorak@redhat.com> - 91.4.0-2a5- Added fix for failing addons signatures.Ml_?2Eike Rathke <erack@redhat.com> - 91.4.0-1ac- Update to 91.4.0 build1Mk_?2Eike Rathke <erack@redhat.com> - 91.3.0-1a- Update to 91.3.0 build1Mj_?1Eike Rathke <erack@redhat.com> - 91.6.0-1arA- Update to 91.6.0 build1i]31Jan Horak <jhorak@redhat.com> - 91.5.0-2ar@- Use default update channel to fix non working enterprise policies:
rhbz#2044667Mh_?1Eike Rathke <erack@redhat.com> - 91.5.0-1a- Update to 91.5.0 build1
n JJ o Mz_?3Eike Rathke <erack@redhat.com> - 91.6.0-1arA- Update to 91.6.0 build1y]33Jan Horak <jhorak@redhat.com> - 91.5.0-2ar@- Use default update channel to fix non working enterprise policies:
rhbz#2044667Mx_?3Eike Rathke <erack@redhat.com> - 91.5.0-1a- Update to 91.5.0 build1]w]a3Jan Horak <jhorak@redhat.com> - 91.4.0-2a5- Added fix for failing addons signatures.Mv_?3Eike Rathke <erack@redhat.com> - 91.4.0-1ac- Update to 91.4.0 build1Mu_?3Eike Rathke <erack@redhat.com> - 91.3.0-1a- Update to 91.3.0 build1Mt_?2Eike Rathke <erack@redhat.com> - 91.7.0-3b%- Update to 91.7.0 build3 s]%2Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315Mr_?2Eike Rathke <erack@redhat.com> - 91.7.0-1b
- Update to 91.7.0 build2q]A2Jan Horak <jhorak@redhat.com> - 91.6.0-2b- Install langpacks to the browser/extensions to make them available in UI:
rhbz#2030190
o n JJ o M_?4Eike Rathke <erack@redhat.com> - 91.6.0-1arA- Update to 91.6.0 build1]34Jan Horak <jhorak@redhat.com> - 91.5.0-2ar@- Use default update channel to fix non working enterprise policies:
rhbz#2044667M_?4Eike Rathke <erack@redhat.com> - 91.5.0-1a- Update to 91.5.0 build1] ]a4Jan Horak <jhorak@redhat.com> - 91.4.0-2a5- Added fix for failing addons signatures.M_?4Eike Rathke <erack@redhat.com> - 91.4.0-1ac- Update to 91.4.0 build1M~_?3Eike Rathke <erack@redhat.com> - 91.7.0-3b%- Update to 91.7.0 build3 }]%3Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M|_?3Eike Rathke <erack@redhat.com> - 91.7.0-1b
- Update to 91.7.0 build2{]A3Jan Horak <jhorak@redhat.com> - 91.6.0-2b- Install langpacks to the browser/extensions to make them available in UI:
rhbz#2030190
e r+V: e D@
c515fb742f9fbf6e205c91df3d75b991bc0e87b359f64d944d2e6930b0b37ce8D?
36e338a02697b1f86cb751a4d30e96bbb9a01a424dfe6f050474e28f832d3b2dD>
5c481b40303686e7be3e1c4fb48c29d0e1c8d41c8eec46b55771c7970af95954D=
a2b22dc88f61d0fa6de4fcb62e090f383e630fc264c56ad005c9c508b1c0fcb2D<
d247f05fd2f22a9dc59679f6c668b92c75b8f5beb481c99983a0b6d26d10bb08D;
2ba8ed563d8e7d31e393c915f3705b7c8c4c991ca337616916c90e4a14049411D:
e65c76e2da0feca843e2f481d8447767d71a1f723ceeca4f9720896b896a6e7eD9
a40300c549d06a08cce3881d68a82db4bbd0d600667f58fd2017f98bd033fa4eD8
e3fe1238b3aefa061d1f4c2e420e93639cafe3a21ce171d5f4a80fbe6aa7e555D7
c448f7707d3e7d90b0f7376b9e91d551448d8304a6b162d474c8cf243b7f11e5D6
34f10adeaa6be7f713c3b688736291759f254661968bf607fab161503364705fD5
48c754619fa5b6636c02b2b5d79f0529027a96e638760d84ff74df57ece87bd2D4
5a169173d476ff530595d0ae6b03d7f7fba5bf999d95a008a477896efb71218d
& n JQ v & M
_?5Eike Rathke <erack@redhat.com> - 91.6.0-1arA- Update to 91.6.0 build1 ]35Jan Horak <jhorak@redhat.com> - 91.5.0-2ar@- Use default update channel to fix non working enterprise policies:
rhbz#2044667M _?5Eike Rathke <erack@redhat.com> - 91.5.0-1a- Update to 91.5.0 build1]
]a5Jan Horak <jhorak@redhat.com> - 91.4.0-2a5- Added fix for failing addons signatures.M _?5Eike Rathke <erack@redhat.com> - 91.4.0-1ac- Update to 91.4.0 build1F_14Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M_?4Eike Rathke <erack@redhat.com> - 91.7.0-3b%- Update to 91.7.0 build3 ]%4Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M_?4Eike Rathke <erack@redhat.com> - 91.7.0-1b
- Update to 91.7.0 build2]A4Jan Horak <jhorak@redhat.com> - 91.6.0-2b- Install langpacks to the browser/extensions to make them available in UI:
rhbz#2030190
v n JQ v M_?6Eike Rathke <erack@redhat.com> - 91.6.0-1arA- Update to 91.6.0 build1]36Jan Horak <jhorak@redhat.com> - 91.5.0-2ar@- Use default update channel to fix non working enterprise policies:
rhbz#2044667M_?6Eike Rathke <erack@redhat.com> - 91.5.0-1a- Update to 91.5.0 build1]]a6Jan Horak <jhorak@redhat.com> - 91.4.0-2a5- Added fix for failing addons signatures.F_15Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M_?5Eike Rathke <erack@redhat.com> - 91.7.0-3b%- Update to 91.7.0 build3 ]%5Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M_?5Eike Rathke <erack@redhat.com> - 91.7.0-1b
- Update to 91.7.0 build2]A5Jan Horak <jhorak@redhat.com> - 91.6.0-2b- Install langpacks to the browser/extensions to make them available in UI:
rhbz#2030190
- n JX } - M _?7Eike Rathke <erack@redhat.com> - 91.6.0-1arA- Update to 91.6.0 build1 ]37Jan Horak <jhorak@redhat.com> - 91.5.0-2ar@- Use default update channel to fix non working enterprise policies:
rhbz#2044667M _?7Eike Rathke <erack@redhat.com> - 91.5.0-1a- Update to 91.5.0 build1] ]a7Jan Horak <jhorak@redhat.com> - 91.4.0-2a5- Added fix for failing addons signatures.F _16Eike Rathke <erack@redhat.com> - 91.9.0-1bg- Update to 91.9.0F_16Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M_?6Eike Rathke <erack@redhat.com> - 91.7.0-3b%- Update to 91.7.0 build3 ]%6Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M_?6Eike Rathke <erack@redhat.com> - 91.7.0-1b
- Update to 91.7.0 build2]A6Jan Horak <jhorak@redhat.com> - 91.6.0-2b- Install langpacks to the browser/extensions to make them available in UI:
rhbz#2030190
n Jh M)_?8Eike Rathke <erack@redhat.com> - 91.6.0-1arA- Update to 91.6.0 build1(]38Jan Horak <jhorak@redhat.com> - 91.5.0-2ar@- Use default update channel to fix non working enterprise policies:
rhbz#2044667M'_?8Eike Rathke <erack@redhat.com> - 91.5.0-1a- Update to 91.5.0 build1F&_17Eike Rathke <erack@redhat.com> - 91.9.0-1bg- Update to 91.9.0F%_17Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M$_?7Eike Rathke <erack@redhat.com> - 91.7.0-3b%- Update to 91.7.0 build3 #]%7Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M"_?7Eike Rathke <erack@redhat.com> - 91.7.0-1b
- Update to 91.7.0 build2!]A7Jan Horak <jhorak@redhat.com> - 91.6.0-2b- Install langpacks to the browser/extensions to make them available in UI:
rhbz#2030190
> n Ji > M3_?9Eike Rathke <erack@redhat.com> - 91.6.0-1arA- Update to 91.6.0 build12]39Jan Horak <jhorak@redhat.com> - 91.5.0-2ar@- Use default update channel to fix non working enterprise policies:
rhbz#2044667M1_?9Eike Rathke <erack@redhat.com> - 91.5.0-1a- Update to 91.5.0 build1L0]?8Jan Horak <jhorak@redhat.com> - 91.9.1-1b- Update to 91.9.1 build1F/_18Eike Rathke <erack@redhat.com> - 91.9.0-1bg- Update to 91.9.0F._18Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M-_?8Eike Rathke <erack@redhat.com> - 91.7.0-3b%- Update to 91.7.0 build3 ,]%8Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M+_?8Eike Rathke <erack@redhat.com> - 91.7.0-1b
- Update to 91.7.0 build2*]A8Jan Horak <jhorak@redhat.com> - 91.6.0-2b- Install langpacks to the browser/extensions to make them available in UI:
rhbz#2030190
) n Ji ) <;a:Eric Garver <egarver@redhat.com> - 0.6.3-3]>- backport recent upstream stable fixes
- backport fix --remove-rules deleting all direct rules
- backport fix unable to delete rich rule forward-port
- backport fix forward-port for external zone hijacking internal zone
- backport fix testsuite iptables lockingL:]?9Jan Horak <jhorak@redhat.com> - 91.9.1-1b- Update to 91.9.1 build1F9_19Eike Rathke <erack@redhat.com> - 91.9.0-1bg- Update to 91.9.0F8_19Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M7_?9Eike Rathke <erack@redhat.com> - 91.7.0-3b%- Update to 91.7.0 build3 6]%9Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M5_?9Eike Rathke <erack@redhat.com> - 91.7.0-1b
- Update to 91.7.0 build24]A9Jan Horak <jhorak@redhat.com> - 91.6.0-2b- Install langpacks to the browser/extensions to make them available in UI:
rhbz#2030190
$@o } `Dca:Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesaCcc:Eric Garver <egarver@redhat.com> - 0.6.3-11^@- feat(service): add RH-Satellite-6-Capsule
Bc3:Eric Garver <egarver@redhat.com> - 0.6.3-10^- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square bracketshAas:Eric Garver <egarver@redhat.com> - 0.6.3-9^9\- fix: firewalld not falling back to interface zonec@ai:Eric Garver <egarver@redhat.com> - 0.6.3-8]X- fix: failure to load modules no longer fatall?a{:Eric Garver <egarver@redhat.com> - 0.6.3-7]- fix: Revert "ebtables: drop support for broute table"r>a:Eric Garver <egarver@redhat.com> - 0.6.3-6]nU- fix: direct: removeRules() not removing all rules in chaind=ak:Eric Garver <egarver@redhat.com> - 0.6.3-5]QT- doc: add --default-config and --system-configr<a:Eric Garver <egarver@redhat.com> - 0.6.3-4]QT- fix: guarantee zone source dispatch is sorted by zone name
$@o } `Mca;Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesaLcc;Eric Garver <egarver@redhat.com> - 0.6.3-11^@- feat(service): add RH-Satellite-6-Capsule
Kc3;Eric Garver <egarver@redhat.com> - 0.6.3-10^- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square bracketshJas;Eric Garver <egarver@redhat.com> - 0.6.3-9^9\- fix: firewalld not falling back to interface zonecIai;Eric Garver <egarver@redhat.com> - 0.6.3-8]X- fix: failure to load modules no longer fatallHa{;Eric Garver <egarver@redhat.com> - 0.6.3-7]- fix: Revert "ebtables: drop support for broute table"rGa;Eric Garver <egarver@redhat.com> - 0.6.3-6]nU- fix: direct: removeRules() not removing all rules in chaindFak;Eric Garver <egarver@redhat.com> - 0.6.3-5]QT- doc: add --default-config and --system-configrEa;Eric Garver <egarver@redhat.com> - 0.6.3-4]QT- fix: guarantee zone source dispatch is sorted by zone name
) Os ) cTai<Eric Garver <egarver@redhat.com> - 0.6.3-8]X- fix: failure to load modules no longer fatallSa{<Eric Garver <egarver@redhat.com> - 0.6.3-7]- fix: Revert "ebtables: drop support for broute table"rRa<Eric Garver <egarver@redhat.com> - 0.6.3-6]nU- fix: direct: removeRules() not removing all rules in chaindQak<Eric Garver <egarver@redhat.com> - 0.6.3-5]QT- doc: add --default-config and --system-configrPa<Eric Garver <egarver@redhat.com> - 0.6.3-4]QT- fix: guarantee zone source dispatch is sorted by zone name<Oa<Eric Garver <egarver@redhat.com> - 0.6.3-3]>- backport recent upstream stable fixes
- backport fix --remove-rules deleting all direct rules
- backport fix unable to delete rich rule forward-port
- backport fix forward-port for external zone hijacking internal zone
- backport fix testsuite iptables lockingnNc};Eric Garver <egarver@redhat.com> - 0.6.3-13`x*- doc: clarify --set-target values "default" vs "reject"
@d c]ai=Eric Garver <egarver@redhat.com> - 0.6.3-8]X- fix: failure to load modules no longer fatall\a{=Eric Garver <egarver@redhat.com> - 0.6.3-7]- fix: Revert "ebtables: drop support for broute table"r[a=Eric Garver <egarver@redhat.com> - 0.6.3-6]nU- fix: direct: removeRules() not removing all rules in chaindZak=Eric Garver <egarver@redhat.com> - 0.6.3-5]QT- doc: add --default-config and --system-configrYa=Eric Garver <egarver@redhat.com> - 0.6.3-4]QT- fix: guarantee zone source dispatch is sorted by zone name`Xca<Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesaWcc<Eric Garver <egarver@redhat.com> - 0.6.3-11^@- feat(service): add RH-Satellite-6-Capsule
Vc3<Eric Garver <egarver@redhat.com> - 0.6.3-10^- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square bracketshUas<Eric Garver <egarver@redhat.com> - 0.6.3-9^9\- fix: firewalld not falling back to interface zone
@ rda>Eric Garver <egarver@redhat.com> - 0.6.3-4]QT- fix: guarantee zone source dispatch is sorted by zone name<ca>Eric Garver <egarver@redhat.com> - 0.6.3-3]>- backport recent upstream stable fixes
- backport fix --remove-rules deleting all direct rules
- backport fix unable to delete rich rule forward-port
- backport fix forward-port for external zone hijacking internal zone
- backport fix testsuite iptables lockingnbc}=Eric Garver <egarver@redhat.com> - 0.6.3-13`x*- doc: clarify --set-target values "default" vs "reject"`aca=Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesa`cc=Eric Garver <egarver@redhat.com> - 0.6.3-11^@- feat(service): add RH-Satellite-6-Capsule
_c3=Eric Garver <egarver@redhat.com> - 0.6.3-10^- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square bracketsh^as=Eric Garver <egarver@redhat.com> - 0.6.3-9^9\- fix: firewalld not falling back to interface zone
$OV rma?Eric Garver <egarver@redhat.com> - 0.6.3-4]QT- fix: guarantee zone source dispatch is sorted by zone name`lca>Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesakcc>Eric Garver <egarver@redhat.com> - 0.6.3-11^@- feat(service): add RH-Satellite-6-Capsule
jc3>Eric Garver <egarver@redhat.com> - 0.6.3-10^- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square bracketshias>Eric Garver <egarver@redhat.com> - 0.6.3-9^9\- fix: firewalld not falling back to interface zonechai>Eric Garver <egarver@redhat.com> - 0.6.3-8]X- fix: failure to load modules no longer fatallga{>Eric Garver <egarver@redhat.com> - 0.6.3-7]- fix: Revert "ebtables: drop support for broute table"rfa>Eric Garver <egarver@redhat.com> - 0.6.3-6]nU- fix: direct: removeRules() not removing all rules in chaindeak>Eric Garver <egarver@redhat.com> - 0.6.3-5]QT- doc: add --default-config and --system-config
$OV nvc}?Eric Garver <egarver@redhat.com> - 0.6.3-13`x*- doc: clarify --set-target values "default" vs "reject"`uca?Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesatcc?Eric Garver <egarver@redhat.com> - 0.6.3-11^@- feat(service): add RH-Satellite-6-Capsule
sc3?Eric Garver <egarver@redhat.com> - 0.6.3-10^- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square bracketshras?Eric Garver <egarver@redhat.com> - 0.6.3-9^9\- fix: firewalld not falling back to interface zonecqai?Eric Garver <egarver@redhat.com> - 0.6.3-8]X- fix: failure to load modules no longer fatallpa{?Eric Garver <egarver@redhat.com> - 0.6.3-7]- fix: Revert "ebtables: drop support for broute table"roa?Eric Garver <egarver@redhat.com> - 0.6.3-6]nU- fix: direct: removeRules() not removing all rules in chaindnak?Eric Garver <egarver@redhat.com> - 0.6.3-5]QT- doc: add --default-config and --system-config
/ Ko / h}as@Eric Garver <egarver@redhat.com> - 0.6.3-9^9\- fix: firewalld not falling back to interface zonec|ai@Eric Garver <egarver@redhat.com> - 0.6.3-8]X- fix: failure to load modules no longer fatall{a{@Eric Garver <egarver@redhat.com> - 0.6.3-7]- fix: Revert "ebtables: drop support for broute table"rza@Eric Garver <egarver@redhat.com> - 0.6.3-6]nU- fix: direct: removeRules() not removing all rules in chaindyak@Eric Garver <egarver@redhat.com> - 0.6.3-5]QT- doc: add --default-config and --system-configrxa@Eric Garver <egarver@redhat.com> - 0.6.3-4]QT- fix: guarantee zone source dispatch is sorted by zone name<wa@Eric Garver <egarver@redhat.com> - 0.6.3-3]>- backport recent upstream stable fixes
- backport fix --remove-rules deleting all direct rules
- backport fix unable to delete rich rule forward-port
- backport fix forward-port for external zone hijacking internal zone
- backport fix testsuite iptables locking
r6Z hasAEric Garver <egarver@redhat.com> - 0.6.3-9^9\- fix: firewalld not falling back to interface zonecaiAEric Garver <egarver@redhat.com> - 0.6.3-8]X- fix: failure to load modules no longer fatalla{AEric Garver <egarver@redhat.com> - 0.6.3-7]- fix: Revert "ebtables: drop support for broute table"raAEric Garver <egarver@redhat.com> - 0.6.3-6]nU- fix: direct: removeRules() not removing all rules in chaindakAEric Garver <egarver@redhat.com> - 0.6.3-5]QT- doc: add --default-config and --system-configraAEric Garver <egarver@redhat.com> - 0.6.3-4]QT- fix: guarantee zone source dispatch is sorted by zone name` ca@Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesacc@Eric Garver <egarver@redhat.com> - 0.6.3-11^@- feat(service): add RH-Satellite-6-Capsule
~c3@Eric Garver <egarver@redhat.com> - 0.6.3-10^- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets
e r+V: e DM
1e46d6b60429dbed54c038855d87f27518fd4c4f7f6e66a15ff60a3bda266f78DL
c3bdafdc7b5df1eae10ff90840698573957b8409268bf2a94cf0a31564d3658cDK
1979501bae62e6070c0c6037b5547a69c4342485df1f9dd821ad18a174b0bd48DJ
85ac0468355fd6847c79849e947fd3b5d88f606ad3aa6fd06cb4aca3fe3c9fc8DI
031f000698ae93b4d5d19e31521dddc308fa90b6dfee2faed3b23620d47fd150DH
91d045022efb0cd2e147b359f329cbd083f5efa2e778b5a35adf22874dba15e2DG
aeadded2fd899332eca7c3d0d69c10f06ba09b988bbb0be751dfc6ea05b1a753DF
724795eec6065da1df593d22a6a359fc5b241aec5a3916cbec646ff78f2196baDE
f19ae45fcb7a758368a349bdd8244b1029ea8e22cd16b83c2fd74bcfa32253b6DD
84fb40705d6f0704a0543373e2e266ea3565b3125d70e1cf4d3a2ef8497670a0DC
ac621916b414525cdb8e9a02b622a0b85c0f539979311abe60541cc0da534032DB
0e230546571aa26c06f1097967584ab4b9e777e7ca6c94d45f8706a36bdccc22DA
4706b7d5da4cf50b5e9a1e2b512bf1746aac5d7ff7525f047e6a79a392d7f548
f r:' f a[kBDavid King <dking@redhat.com> - 1.0.2-5\d- Do not mount /proc in root sandbox (#1675435)Z[]BDavid King <dking@redhat.com> - 1.0.2-4\<y- Apply the OCI support patch (#1660137)f
[uBDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R cEBKalev Lember <klember@redhat.com> - 1.0.2-2[Q@- Update to 1.0.2 (#1570030)R cEBKalev Lember <klember@redhat.com> - 1.0.1-1[- Update to 1.0.1 (#1570030)n
c}AEric Garver <egarver@redhat.com> - 0.6.3-13`x*- doc: clarify --set-target values "default" vs "reject"` caAEric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesaccAEric Garver <egarver@redhat.com> - 0.6.3-11^@- feat(service): add RH-Satellite-6-Capsule
c3AEric Garver <egarver@redhat.com> - 0.6.3-10^- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets
V J0r V X[YCDavid King <dking@redhat.com> - 1.0.2-6\f- Tweak /proc sandbox patch (#1675435)a[kCDavid King <dking@redhat.com> - 1.0.2-5\d- Do not mount /proc in root sandbox (#1675435)Z[]CDavid King <dking@redhat.com> - 1.0.2-4\<y- Apply the OCI support patch (#1660137)f[uCDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)RcECKalev Lember <klember@redhat.com> - 1.0.2-2[Q@- Update to 1.0.2 (#1570030)R]KBDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)mc{BKalev Lember <klember@redhat.com> - 1.0.9-9^1s- Backport OCI fixes from upstream
- Resolves: #1796340RcEBKalev Lember <klember@redhat.com> - 1.0.9-8]@- Update to 1.0.9 (#1753591)X[YBDavid King <dking@redhat.com> - 1.0.2-7\@- Fix IOCSTI sandbox bypass (#1700652)X[YBDavid King <dking@redhat.com> - 1.0.2-6\f- Tweak /proc sandbox patch (#1675435)
V P6p V X#[YDDavid King <dking@redhat.com> - 1.0.2-7\@- Fix IOCSTI sandbox bypass (#1700652)X"[YDDavid King <dking@redhat.com> - 1.0.2-6\f- Tweak /proc sandbox patch (#1675435)a![kDDavid King <dking@redhat.com> - 1.0.2-5\d- Do not mount /proc in root sandbox (#1675435)Z []DDavid King <dking@redhat.com> - 1.0.2-4\<y- Apply the OCI support patch (#1660137)f [uDDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R ]KCDavid King <dking@redhat.com> - 1.0.9-11`X- Fix CVE-2021-21381 (#1938059)R ]KCDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m c{CKalev Lember <klember@redhat.com> - 1.0.9-9^1s- Backport OCI fixes from upstream
- Resolves: #1796340RcECKalev Lember <klember@redhat.com> - 1.0.9-8]@- Update to 1.0.9 (#1753591)X[YCDavid King <dking@redhat.com> - 1.0.2-7\@- Fix IOCSTI sandbox bypass (#1700652)
g ;3r g R-cEEKalev Lember <klember@redhat.com> - 1.0.9-8]@- Update to 1.0.9 (#1753591)X,[YEDavid King <dking@redhat.com> - 1.0.2-7\@- Fix IOCSTI sandbox bypass (#1700652)X+[YEDavid King <dking@redhat.com> - 1.0.2-6\f- Tweak /proc sandbox patch (#1675435)a*[kEDavid King <dking@redhat.com> - 1.0.2-5\d- Do not mount /proc in root sandbox (#1675435)Z)[]EDavid King <dking@redhat.com> - 1.0.2-4\<y- Apply the OCI support patch (#1660137)[(oKDDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R']KDDavid King <dking@redhat.com> - 1.0.9-11`X- Fix CVE-2021-21381 (#1938059)R&]KDDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m%c{DKalev Lember <klember@redhat.com> - 1.0.9-9^1s- Backport OCI fixes from upstream
- Resolves: #1796340R$cEDKalev Lember <klember@redhat.com> - 1.0.9-8]@- Update to 1.0.9 (#1753591)
f ;:' f a7[kFDavid King <dking@redhat.com> - 1.0.2-5\d- Do not mount /proc in root sandbox (#1675435)Z6[]FDavid King <dking@redhat.com> - 1.0.2-4\<y- Apply the OCI support patch (#1660137)f5[uFDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R4cEFKalev Lember <klember@redhat.com> - 1.0.2-2[Q@- Update to 1.0.2 (#1570030)R3cEFKalev Lember <klember@redhat.com> - 1.0.1-1[- Update to 1.0.1 (#1570030)K2e5EKalev Lember <klember@redhat.com> - 1.0.9-13fb@- Fix CVE-2024-32462[1oKEDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R0]KEDavid King <dking@redhat.com> - 1.0.9-11`X- Fix CVE-2021-21381 (#1938059)R/]KEDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m.c{EKalev Lember <klember@redhat.com> - 1.0.9-9^1s- Backport OCI fixes from upstream
- Resolves: #1796340
V J0r V XA[YGDavid King <dking@redhat.com> - 1.0.2-6\f- Tweak /proc sandbox patch (#1675435)a@[kGDavid King <dking@redhat.com> - 1.0.2-5\d- Do not mount /proc in root sandbox (#1675435)Z?[]GDavid King <dking@redhat.com> - 1.0.2-4\<y- Apply the OCI support patch (#1660137)f>[uGDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R=cEGKalev Lember <klember@redhat.com> - 1.0.2-2[Q@- Update to 1.0.2 (#1570030)R<]KFDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m;c{FKalev Lember <klember@redhat.com> - 1.0.9-9^1s- Backport OCI fixes from upstream
- Resolves: #1796340R:cEFKalev Lember <klember@redhat.com> - 1.0.9-8]@- Update to 1.0.9 (#1753591)X9[YFDavid King <dking@redhat.com> - 1.0.2-7\@- Fix IOCSTI sandbox bypass (#1700652)X8[YFDavid King <dking@redhat.com> - 1.0.2-6\f- Tweak /proc sandbox patch (#1675435)
V P6p V XK[YHDavid King <dking@redhat.com> - 1.0.2-7\@- Fix IOCSTI sandbox bypass (#1700652)XJ[YHDavid King <dking@redhat.com> - 1.0.2-6\f- Tweak /proc sandbox patch (#1675435)aI[kHDavid King <dking@redhat.com> - 1.0.2-5\d- Do not mount /proc in root sandbox (#1675435)ZH[]HDavid King <dking@redhat.com> - 1.0.2-4\<y- Apply the OCI support patch (#1660137)fG[uHDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)RF]KGDavid King <dking@redhat.com> - 1.0.9-11`X- Fix CVE-2021-21381 (#1938059)RE]KGDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)mDc{GKalev Lember <klember@redhat.com> - 1.0.9-9^1s- Backport OCI fixes from upstream
- Resolves: #1796340RCcEGKalev Lember <klember@redhat.com> - 1.0.9-8]@- Update to 1.0.9 (#1753591)XB[YGDavid King <dking@redhat.com> - 1.0.2-7\@- Fix IOCSTI sandbox bypass (#1700652)
g ;3r g RUcEIKalev Lember <klember@redhat.com> - 1.0.9-8]@- Update to 1.0.9 (#1753591)XT[YIDavid King <dking@redhat.com> - 1.0.2-7\@- Fix IOCSTI sandbox bypass (#1700652)XS[YIDavid King <dking@redhat.com> - 1.0.2-6\f- Tweak /proc sandbox patch (#1675435)aR[kIDavid King <dking@redhat.com> - 1.0.2-5\d- Do not mount /proc in root sandbox (#1675435)ZQ[]IDavid King <dking@redhat.com> - 1.0.2-4\<y- Apply the OCI support patch (#1660137)[PoKHDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)RO]KHDavid King <dking@redhat.com> - 1.0.9-11`X- Fix CVE-2021-21381 (#1938059)RN]KHDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)mMc{HKalev Lember <klember@redhat.com> - 1.0.9-9^1s- Backport OCI fixes from upstream
- Resolves: #1796340RLcEHKalev Lember <klember@redhat.com> - 1.0.9-8]@- Update to 1.0.9 (#1753591)
f ;:' f a_[kJDavid King <dking@redhat.com> - 1.0.2-5\d- Do not mount /proc in root sandbox (#1675435)Z^[]JDavid King <dking@redhat.com> - 1.0.2-4\<y- Apply the OCI support patch (#1660137)f][uJDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R\cEJKalev Lember <klember@redhat.com> - 1.0.2-2[Q@- Update to 1.0.2 (#1570030)R[cEJKalev Lember <klember@redhat.com> - 1.0.1-1[- Update to 1.0.1 (#1570030)KZe5IKalev Lember <klember@redhat.com> - 1.0.9-13fb@- Fix CVE-2024-32462[YoKIDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)RX]KIDavid King <dking@redhat.com> - 1.0.9-11`X- Fix CVE-2021-21381 (#1938059)RW]KIDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)mVc{IKalev Lember <klember@redhat.com> - 1.0.9-9^1s- Backport OCI fixes from upstream
- Resolves: #1796340
V J0r V Xi[YKDavid King <dking@redhat.com> - 1.0.2-6\f- Tweak /proc sandbox patch (#1675435)ah[kKDavid King <dking@redhat.com> - 1.0.2-5\d- Do not mount /proc in root sandbox (#1675435)Zg[]KDavid King <dking@redhat.com> - 1.0.2-4\<y- Apply the OCI support patch (#1660137)ff[uKDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)RecEKKalev Lember <klember@redhat.com> - 1.0.2-2[Q@- Update to 1.0.2 (#1570030)Rd]KJDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)mcc{JKalev Lember <klember@redhat.com> - 1.0.9-9^1s- Backport OCI fixes from upstream
- Resolves: #1796340RbcEJKalev Lember <klember@redhat.com> - 1.0.9-8]@- Update to 1.0.9 (#1753591)Xa[YJDavid King <dking@redhat.com> - 1.0.2-7\@- Fix IOCSTI sandbox bypass (#1700652)X`[YJDavid King <dking@redhat.com> - 1.0.2-6\f- Tweak /proc sandbox patch (#1675435)
V P6p V Xs[YLDavid King <dking@redhat.com> - 1.0.2-7\@- Fix IOCSTI sandbox bypass (#1700652)Xr[YLDavid King <dking@redhat.com> - 1.0.2-6\f- Tweak /proc sandbox patch (#1675435)aq[kLDavid King <dking@redhat.com> - 1.0.2-5\d- Do not mount /proc in root sandbox (#1675435)Zp[]LDavid King <dking@redhat.com> - 1.0.2-4\<y- Apply the OCI support patch (#1660137)fo[uLDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)Rn]KKDavid King <dking@redhat.com> - 1.0.9-11`X- Fix CVE-2021-21381 (#1938059)Rm]KKDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)mlc{KKalev Lember <klember@redhat.com> - 1.0.9-9^1s- Backport OCI fixes from upstream
- Resolves: #1796340RkcEKKalev Lember <klember@redhat.com> - 1.0.9-8]@- Update to 1.0.9 (#1753591)Xj[YKDavid King <dking@redhat.com> - 1.0.2-7\@- Fix IOCSTI sandbox bypass (#1700652)
g ;3r g R}cEMKalev Lember <klember@redhat.com> - 1.0.9-8]@- Update to 1.0.9 (#1753591)X|[YMDavid King <dking@redhat.com> - 1.0.2-7\@- Fix IOCSTI sandbox bypass (#1700652)X{[YMDavid King <dking@redhat.com> - 1.0.2-6\f- Tweak /proc sandbox patch (#1675435)az[kMDavid King <dking@redhat.com> - 1.0.2-5\d- Do not mount /proc in root sandbox (#1675435)Zy[]MDavid King <dking@redhat.com> - 1.0.2-4\<y- Apply the OCI support patch (#1660137)[xoKLDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)Rw]KLDavid King <dking@redhat.com> - 1.0.9-11`X- Fix CVE-2021-21381 (#1938059)Rv]KLDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)muc{LKalev Lember <klember@redhat.com> - 1.0.9-9^1s- Backport OCI fixes from upstream
- Resolves: #1796340RtcELKalev Lember <klember@redhat.com> - 1.0.9-8]@- Update to 1.0.9 (#1753591)
f ;:' f a[kNDavid King <dking@redhat.com> - 1.0.2-5\d- Do not mount /proc in root sandbox (#1675435)Z[]NDavid King <dking@redhat.com> - 1.0.2-4\<y- Apply the OCI support patch (#1660137)f[uNDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)RcENKalev Lember <klember@redhat.com> - 1.0.2-2[Q@- Update to 1.0.2 (#1570030)RcENKalev Lember <klember@redhat.com> - 1.0.1-1[- Update to 1.0.1 (#1570030)Ke5MKalev Lember <klember@redhat.com> - 1.0.9-13fb@- Fix CVE-2024-32462[oKMDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R ]KMDavid King <dking@redhat.com> - 1.0.9-11`X- Fix CVE-2021-21381 (#1938059)R]KMDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m~c{MKalev Lember <klember@redhat.com> - 1.0.9-9^1s- Backport OCI fixes from upstream
- Resolves: #1796340
e r+V: e DZ
f44cd6beef0e0285e87ceddb589f3ce6b36f4340a280ed674cc37aa7141b8397DY
ef82a93c26a7db64bb635cb373e0bf00ab1038b8e42c02b37a970cc41e97ef34DX
c2b79101f730ccfa892ffdfdb7ce4d806f9960bc302581dc10991c7321dd4e24DW
1e843fde687553231eecf687163be424f4d2df8b4398e28a34c6dff791e1b161DV
f61c338504f42e88dbef95a448e0e1aa1c04a89586134610472f384c31966981DU
7ea68138245e021dc4dbaf9e1b990e5250e1b72ebca41352896a1b5dbceda2fbDT
4b031b0a3b505796cae1f7221a96821c6c953c4e2f94f8869bfc2a6139af8b2aDS
cddc3744f22b625662ab15986f90fc202f14ece03ac5fce4fbde2d656b5f38ddDR
5cd33852a9e9061d05228552a9fa6fe6b3b0667fc738828b9df7e633dbe46bd5DQ
a300fb68037da47d07903271c1b04a1bf9b9ce2da5c1a0e56fcede7f6614fa62DP
ddd64d000d677447dbb3a66637d5f9d9064439fbdd584fdad1f5aea0b47ef550DO
e251fe0d7ffbb8b51c6644310756c5ea0a0ea8d5282cb0ecda819c8ff161dfecDN
6a5560cf575ee9bfa9cac85044e94e3bce3ea85e26431c99e41877289cf82b64
V J0r V X[YODavid King <dking@redhat.com> - 1.0.2-6\f- Tweak /proc sandbox patch (#1675435)a[kODavid King <dking@redhat.com> - 1.0.2-5\d- Do not mount /proc in root sandbox (#1675435)Z[]ODavid King <dking@redhat.com> - 1.0.2-4\<y- Apply the OCI support patch (#1660137)f[uODavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R
cEOKalev Lember <klember@redhat.com> - 1.0.2-2[Q@- Update to 1.0.2 (#1570030)R ]KNDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m c{NKalev Lember <klember@redhat.com> - 1.0.9-9^1s- Backport OCI fixes from upstream
- Resolves: #1796340R
cENKalev Lember <klember@redhat.com> - 1.0.9-8]@- Update to 1.0.9 (#1753591)X [YNDavid King <dking@redhat.com> - 1.0.2-7\@- Fix IOCSTI sandbox bypass (#1700652)X[YNDavid King <dking@redhat.com> - 1.0.2-6\f- Tweak /proc sandbox patch (#1675435) of Iflrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| T _ j v
# / ; G R ] g p z
) 3 ; D M T ] d m v } # - 7 A K U _ i s } % / 8 A J S [
d m v
' . 5 < C K S Z a i r { " # $% %- &5 '= (D *L +T ,] -e .n /r 1t 2x 3| 5~ 6 7 8 9 : ; < = >$ ?( @+ A0 B4 C8 D< F? GD HH
V P6p V X[YPDavid King <dking@redhat.com> - 1.0.2-7\@- Fix IOCSTI sandbox bypass (#1700652)X[YPDavid King <dking@redhat.com> - 1.0.2-6\f- Tweak /proc sandbox patch (#1675435)a[kPDavid King <dking@redhat.com> - 1.0.2-5\d- Do not mount /proc in root sandbox (#1675435)Z[]PDavid King <dking@redhat.com> - 1.0.2-4\<y- Apply the OCI support patch (#1660137)f[uPDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R]KODavid King <dking@redhat.com> - 1.0.9-11`X- Fix CVE-2021-21381 (#1938059)R]KODavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)mc{OKalev Lember <klember@redhat.com> - 1.0.9-9^1s- Backport OCI fixes from upstream
- Resolves: #1796340RcEOKalev Lember <klember@redhat.com> - 1.0.9-8]@- Update to 1.0.9 (#1753591)X[YODavid King <dking@redhat.com> - 1.0.2-7\@- Fix IOCSTI sandbox bypass (#1700652)
g ;3r g R%cEQKalev Lember <klember@redhat.com> - 1.0.9-8]@- Update to 1.0.9 (#1753591)X$[YQDavid King <dking@redhat.com> - 1.0.2-7\@- Fix IOCSTI sandbox bypass (#1700652)X#[YQDavid King <dking@redhat.com> - 1.0.2-6\f- Tweak /proc sandbox patch (#1675435)a"[kQDavid King <dking@redhat.com> - 1.0.2-5\d- Do not mount /proc in root sandbox (#1675435)Z![]QDavid King <dking@redhat.com> - 1.0.2-4\<y- Apply the OCI support patch (#1660137)[ oKPDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R ]KPDavid King <dking@redhat.com> - 1.0.9-11`X- Fix CVE-2021-21381 (#1938059)R ]KPDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m c{PKalev Lember <klember@redhat.com> - 1.0.9-9^1s- Backport OCI fixes from upstream
- Resolves: #1796340R cEPKalev Lember <klember@redhat.com> - 1.0.9-8]@- Update to 1.0.9 (#1753591)
8 ;:# 8 M/_?RDaniel Mach <dmach@redhat.com> - 1.3.0-11Rk- Mass rebuild 2013-12-27.RFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildZ-Y_RAdam Tkac <atkac redhat com> - 1.3.0-9P9@- rebuild due to "jpeg8-ABI" feature drops,YRAdam Tkac <atkac redhat com> - 1.3.0-8P- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)A+Y-RAdam Tkac <atkac redhat com> - 1.3.0-7PN@- add xcursor BRK*e5QKalev Lember <klember@redhat.com> - 1.0.9-13fb@- Fix CVE-2024-32462[)oKQDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R(]KQDavid King <dking@redhat.com> - 1.0.9-11`X- Fix CVE-2021-21381 (#1938059)R']KQDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m&c{QKalev Lember <klember@redhat.com> - 1.0.9-9^1s- Backport OCI fixes from upstream
- Resolves: #1796340
FK 8SFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildZ7Y_SAdam Tkac <atkac redhat com> - 1.3.0-9P9@- rebuild due to "jpeg8-ABI" feature drops6YSAdam Tkac <atkac redhat com> - 1.3.0-8P- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)A5Y-SAdam Tkac <atkac redhat com> - 1.3.0-7PN@- add xcursor BR{4cRJan Grulich <jgrulich@redhat.com> - 1.3.4-3b- Fix segfault if using very large selections
Resolves: bz#19998193cMRJan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt- Do not drop linker flags for main library when --use-xxx option is used
Resolves: bz#1510482]2c[RJan Grulich <jgrulich@redhat.com> - 1.3.4-1X}@- Re-base to 1.3.4 (+ sync with Fedora)M1_?RDaniel Mach <dmach@redhat.com> - 1.3.0-13RU- Mass rebuild 2014-01-24g0coRPetr Hracek <phracek@redhat.com> - 1.3.0-12R@- Resolves: #1048857 fltk does not build on RHEL7
f F}9 f ZAY_TAdam Tkac <atkac redhat com> - 1.3.0-9P9@- rebuild due to "jpeg8-ABI" feature drops@YTAdam Tkac <atkac redhat com> - 1.3.0-8P- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)A?Y-TAdam Tkac <atkac redhat com> - 1.3.0-7PN@- add xcursor BR{>cSJan Grulich <jgrulich@redhat.com> - 1.3.4-3b- Fix segfault if using very large selections
Resolves: bz#1999819=cMSJan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt- Do not drop linker flags for main library when --use-xxx option is used
Resolves: bz#1510482]<c[SJan Grulich <jgrulich@redhat.com> - 1.3.4-1X}@- Re-base to 1.3.4 (+ sync with Fedora)M;_?SDaniel Mach <dmach@redhat.com> - 1.3.0-13RU- Mass rebuild 2014-01-24g:coSPetr Hracek <phracek@redhat.com> - 1.3.0-12R@- Resolves: #1048857 fltk does not build on RHEL7M9_?SDaniel Mach <dmach@redhat.com> - 1.3.0-11Rk- Mass rebuild 2013-12-27
( e[` ( sJYUAdam Tkac <atkac redhat com> - 1.3.0-8P- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)AIY-UAdam Tkac <atkac redhat com> - 1.3.0-7PN@- add xcursor BR{HcTJan Grulich <jgrulich@redhat.com> - 1.3.4-3b- Fix segfault if using very large selections
Resolves: bz#1999819GcMTJan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt- Do not drop linker flags for main library when --use-xxx option is used
Resolves: bz#1510482]Fc[TJan Grulich <jgrulich@redhat.com> - 1.3.4-1X}@- Re-base to 1.3.4 (+ sync with Fedora)ME_?TDaniel Mach <dmach@redhat.com> - 1.3.0-13RU- Mass rebuild 2014-01-24gDcoTPetr Hracek <phracek@redhat.com> - 1.3.0-12R@- Resolves: #1048857 fltk does not build on RHEL7MC_?TDaniel Mach <dmach@redhat.com> - 1.3.0-11Rk- Mass rebuild 2013-12-27BTFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
A N A ASY-VAdam Tkac <atkac redhat com> - 1.3.0-7PN@- add xcursor BR{RcUJan Grulich <jgrulich@redhat.com> - 1.3.4-3b- Fix segfault if using very large selections
Resolves: bz#1999819QcMUJan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt- Do not drop linker flags for main library when --use-xxx option is used
Resolves: bz#1510482]Pc[UJan Grulich <jgrulich@redhat.com> - 1.3.4-1X}@- Re-base to 1.3.4 (+ sync with Fedora)MO_?UDaniel Mach <dmach@redhat.com> - 1.3.0-13RU- Mass rebuild 2014-01-24gNcoUPetr Hracek <phracek@redhat.com> - 1.3.0-12R@- Resolves: #1048857 fltk does not build on RHEL7MM_?UDaniel Mach <dmach@redhat.com> - 1.3.0-11Rk- Mass rebuild 2013-12-27LUFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildZKY_UAdam Tkac <atkac redhat com> - 1.3.0-9P9@- rebuild due to "jpeg8-ABI" feature drop
-B( [cMVJan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt- Do not drop linker flags for main library when --use-xxx option is used
Resolves: bz#1510482]Zc[VJan Grulich <jgrulich@redhat.com> - 1.3.4-1X}@- Re-base to 1.3.4 (+ sync with Fedora)MY_?VDaniel Mach <dmach@redhat.com> - 1.3.0-13RU- Mass rebuild 2014-01-24gXcoVPetr Hracek <phracek@redhat.com> - 1.3.0-12R@- Resolves: #1048857 fltk does not build on RHEL7MW_?VDaniel Mach <dmach@redhat.com> - 1.3.0-11Rk- Mass rebuild 2013-12-27VVFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildZUY_VAdam Tkac <atkac redhat com> - 1.3.0-9P9@- rebuild due to "jpeg8-ABI" feature dropsTYVAdam Tkac <atkac redhat com> - 1.3.0-8P- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)
f >k f ]dc[WJan Grulich <jgrulich@redhat.com> - 1.3.4-1X}@- Re-base to 1.3.4 (+ sync with Fedora)Mc_?WDaniel Mach <dmach@redhat.com> - 1.3.0-13RU- Mass rebuild 2014-01-24gbcoWPetr Hracek <phracek@redhat.com> - 1.3.0-12R@- Resolves: #1048857 fltk does not build on RHEL7Ma_?WDaniel Mach <dmach@redhat.com> - 1.3.0-11Rk- Mass rebuild 2013-12-27`WFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildZ_Y_WAdam Tkac <atkac redhat com> - 1.3.0-9P9@- rebuild due to "jpeg8-ABI" feature drops^YWAdam Tkac <atkac redhat com> - 1.3.0-8P- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)A]Y-WAdam Tkac <atkac redhat com> - 1.3.0-7PN@- add xcursor BR{\cVJan Grulich <jgrulich@redhat.com> - 1.3.4-3b- Fix segfault if using very large selections
Resolves: bz#1999819
+ e-5 { + Mm_?XDaniel Mach <dmach@redhat.com> - 1.3.0-13RU- Mass rebuild 2014-01-24glcoXPetr Hracek <phracek@redhat.com> - 1.3.0-12R@- Resolves: #1048857 fltk does not build on RHEL7Mk_?XDaniel Mach <dmach@redhat.com> - 1.3.0-11Rk- Mass rebuild 2013-12-27jXFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildZiY_XAdam Tkac <atkac redhat com> - 1.3.0-9P9@- rebuild due to "jpeg8-ABI" feature dropshYXAdam Tkac <atkac redhat com> - 1.3.0-8P- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)AgY-XAdam Tkac <atkac redhat com> - 1.3.0-7PN@- add xcursor BR{fcWJan Grulich <jgrulich@redhat.com> - 1.3.4-3b- Fix segfault if using very large selections
Resolves: bz#1999819ecMWJan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt- Do not drop linker flags for main library when --use-xxx option is used
Resolves: bz#1510482
7 FK 7 Lv]?YDaniel Mach <dmach@redhat.com> - 4.0.9-6RU- Mass rebuild 2014-01-24Lu]?YDaniel Mach <dmach@redhat.com> - 4.0.9-5Rk- Mass rebuild 2013-12-27steYJiri Popelka <jpopelka@redhat.com> - 4.0.9-4R- Correct Obsoletes/Provides printer-filters (bug #1035450)|s[ YTim Waugh <twaugh@redhat.com> - 4.0.9-3Q@- Obsolete/provide printer-filters package now it has gone (bug #967316).yrk YTom Callaway <spot@fedoraproject.org> - 4.0.9-2Q@- remove Artistic test scripts from source tarball (bz 967406)>qeYJiri Popelka <jpopelka@redhat.com> - 4.0.9-1Q?- 4.0.9{pcXJan Grulich <jgrulich@redhat.com> - 1.3.4-3b- Fix segfault if using very large selections
Resolves: bz#1999819ocMXJan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt- Do not drop linker flags for main library when --use-xxx option is used
Resolves: bz#1510482]nc[XJan Grulich <jgrulich@redhat.com> - 1.3.4-1X}@- Re-base to 1.3.4 (+ sync with Fedora)
* :+n y * L]?ZDaniel Mach <dmach@redhat.com> - 4.0.9-5Rk- Mass rebuild 2013-12-27s~eZJiri Popelka <jpopelka@redhat.com> - 4.0.9-4R- Correct Obsoletes/Provides printer-filters (bug #1035450)|}[ ZTim Waugh <twaugh@redhat.com> - 4.0.9-3Q@- Obsolete/provide printer-filters package now it has gone (bug #967316).y|k ZTom Callaway <spot@fedoraproject.org> - 4.0.9-2Q@- remove Artistic test scripts from source tarball (bz 967406)>{eZJiri Popelka <jpopelka@redhat.com> - 4.0.9-1Q?- 4.0.9zg)YZdenek Dohnal <zdohnal@redhat.com> - 4.0.9-10_ - 1891679 - [RHEL 7] foomatic-rip files up /var/spool/tmp with temporary files ye YZdenek Dohnal <zdohnal@redhat.com> - 4.0.9-9\@- 1707559 - removal of option in ghostscript caused foomatic-rip to failkx[YTim Waugh <twaugh@redhat.com> - 4.0.9-8S- Put some text into foomatic-preferred-drivers man page.Uw[SYTim Waugh <twaugh@redhat.com> - 4.0.9-7S@- Ship more manpages (bug #948965).
F Yg[ F WeM[Ondrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)__c[Ondrej Holy <oholy@redhat.com> - 1.0.2-15Zq- Fix smartcard usage in manpage (#1428041)V_Q[Ondrej Holy <oholy@redhat.com> - 1.0.2-14Z@- Add FIPS mode support (#1363811)~_ [Ondrej Holy <oholy@redhat.com> - 1.0.2-13Y - Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)g)ZZdenek Dohnal <zdohnal@redhat.com> - 4.0.9-10_ - 1891679 - [RHEL 7] foomatic-rip files up /var/spool/tmp with temporary files e ZZdenek Dohnal <zdohnal@redhat.com> - 4.0.9-9\@- 1707559 - removal of option in ghostscript caused foomatic-rip to failk[ZTim Waugh <twaugh@redhat.com> - 4.0.9-8S- Put some text into foomatic-preferred-drivers man page.U[SZTim Waugh <twaugh@redhat.com> - 4.0.9-7S@- Ship more manpages (bug #948965).L ]?ZDaniel Mach <dmach@redhat.com> - 4.0.9-6RU- Mass rebuild 2014-01-24
e r+V: e Dg
d2c7c9daa4378bb677e4fa893b6839ebef8009ea1e132569083c4a845ec60a22Df
779af39181edc4bdb4e091b266ec46176447a4ccc0941c928f999ed3fa780cacDe
bb549c96d2986def32a70c8f766e2a23ac2dd2f4c76e72e116fdc699bd0c6eb9Dd
5dfc9505dc8c10ee2fa6b344d1a86a8ea57d43b15353225888d1f9888a840220Dc
8c8b857999a32f70ec103af37b684d4c2eb482a3f8d75f62cec86acb6c10e940Db
530c5e0227cf705a60da80a809db414020ef88b26923ed6828fe285d4f1b5e18Da
564e997b9c790bd2ccb1bc895a8ace373c5af426e771063ebc24eb3ac892b979D`
b06da13bab5aee0690c6d98073ecafe702d73f53e8e1b9421e90fe7928ba1d17D_
1ca99a830f21e3f243a3f20099285c28e83738059736b8931da396f1b77e1b0aD^
b884e513e4fabc67d102225daf07a6948f3c7aba4eea99292cf5bbaa993d41e7D]
5496c1582c68c5314603d320dbb44e5435532564f1a4c6068e8040f2767a1797D\
7b4f34148e411ba03bffe54c35102df45b1e78e1ed461d8ba62a118f517e96d9D[
a4f2dc5f488dc7bd53211931528d9c122391fbf1997e99e33a04a33c38c67995
B D[ B ~_ \Ondrej Holy <oholy@redhat.com> - 1.0.2-13Y - Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)gC[Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-5ab- Update: Refactored RPC gateway parser (rhbz#2017944)
+ fix issues discovered by Covscanf
gi[Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a@- Refactored RPC gateway parser (rhbz#2017944)} g[Felipe Borges <feborges@redhat.com> - 2.1.1-3a - Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O ]E[Ondrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)|
e[Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g em[Ondrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)
F E/ F fgi\Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a@- Refactored RPC gateway parser (rhbz#2017944)}g\Felipe Borges <feborges@redhat.com> - 2.1.1-3a - Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O]E\Ondrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)|e\Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)gem\Ondrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)WeM\Ondrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)__c\Ondrej Holy <oholy@redhat.com> - 1.0.2-15Zq- Fix smartcard usage in manpage (#1428041)V_Q\Ondrej Holy <oholy@redhat.com> - 1.0.2-14Z@- Add FIPS mode support (#1363811)
h h,h h | e]Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g em]Ondrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W eM]Ondrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)__c]Ondrej Holy <oholy@redhat.com> - 1.0.2-15Zq- Fix smartcard usage in manpage (#1428041)V_Q]Ondrej Holy <oholy@redhat.com> - 1.0.2-14Z@- Add FIPS mode support (#1363811)~_ ]Ondrej Holy <oholy@redhat.com> - 1.0.2-13Y - Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)gC\Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-5ab- Update: Refactored RPC gateway parser (rhbz#2017944)
+ fix issues discovered by Covscan
- .-S - g'em^Ondrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W&eM^Ondrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_%_c^Ondrej Holy <oholy@redhat.com> - 1.0.2-15Zq- Fix smartcard usage in manpage (#1428041)V$_Q^Ondrej Holy <oholy@redhat.com> - 1.0.2-14Z@- Add FIPS mode support (#1363811)~#_ ^Ondrej Holy <oholy@redhat.com> - 1.0.2-13Y - Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)"gC]Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-5ab- Update: Refactored RPC gateway parser (rhbz#2017944)
+ fix issues discovered by Covscanf!gi]Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a@- Refactored RPC gateway parser (rhbz#2017944)} g]Felipe Borges <feborges@redhat.com> - 2.1.1-3a - Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O ]E]Ondrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)
S .- S V._Q_Ondrej Holy <oholy@redhat.com> - 1.0.2-14Z@- Add FIPS mode support (#1363811)~-_ _Ondrej Holy <oholy@redhat.com> - 1.0.2-13Y - Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810),gC^Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-5ab- Update: Refactored RPC gateway parser (rhbz#2017944)
+ fix issues discovered by Covscanf+gi^Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a@- Refactored RPC gateway parser (rhbz#2017944)}*g^Felipe Borges <feborges@redhat.com> - 2.1.1-3a - Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O)]E^Ondrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)|(e^Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)
D f5gi_Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a@- Refactored RPC gateway parser (rhbz#2017944)}4g_Felipe Borges <feborges@redhat.com> - 2.1.1-3a - Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O3]E_Ondrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)|2e_Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g1em_Ondrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W0eM_Ondrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_/_c_Ondrej Holy <oholy@redhat.com> - 1.0.2-15Zq- Fix smartcard usage in manpage (#1428041)
y hPV y |<] `Marek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504[;eU`Richard Hughes <rhughes@redhat.com> - 2.8-10[- Update to 2.8
- Resolves: #1576504m:c{`Marek Kasik <mkasik@redhat.com> - 2.4.11-15XA- Fix shellcheck warning (coverity)
- Related: #13681419c+`Marek Kasik <mkasik@redhat.com> - 2.4.11-14X@- Backport functions for reading signed values from stream
- Resolves: #1381678z8c`Marek Kasik <mkasik@redhat.com> - 2.4.11-13X- Don't show path of non-existing libtool file
- Resolves: #13681417cM`Marek Kasik <mkasik@redhat.com> - 2.4.11-12V3- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #13032686gC_Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-5ab- Update: Refactored RPC gateway parser (rhbz#2017944)
+ fix issues discovered by Covscan
i p i Cc+aMarek Kasik <mkasik@redhat.com> - 2.4.11-14X@- Backport functions for reading signed values from stream
- Resolves: #1381678zBcaMarek Kasik <mkasik@redhat.com> - 2.4.11-13X- Don't show path of non-existing libtool file
- Resolves: #1368141AcMaMarek Kasik <mkasik@redhat.com> - 2.4.11-12V3- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268@m;`Marek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_ @- Test bitmap size earlier for PNGs
- Fix memory leak in pngshim.c
- Resolves: #1891635j?]{`Marek Kasik <mkasik@redhat.com> - 2.8-14\M- Fix rendering in monochrome mode
- Resolves: #1657479>]1`Marek Kasik <mkasik@redhat.com> - 2.8-13[- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1645218d=]o`Marek Kasik <mkasik@redhat.com> - 2.8-12[o- Fix loading of avar tables
- Resolves: #1576504
# 2LU # KcMbMarek Kasik <mkasik@redhat.com> - 2.4.11-12V3- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268Jm;aMarek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_ @- Test bitmap size earlier for PNGs
- Fix memory leak in pngshim.c
- Resolves: #1891635jI]{aMarek Kasik <mkasik@redhat.com> - 2.8-14\M- Fix rendering in monochrome mode
- Resolves: #1657479H]1aMarek Kasik <mkasik@redhat.com> - 2.8-13[- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1645218dG]oaMarek Kasik <mkasik@redhat.com> - 2.8-12[o- Fix loading of avar tables
- Resolves: #1576504|F] aMarek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504[EeUaRichard Hughes <rhughes@redhat.com> - 2.8-10[- Update to 2.8
- Resolves: #1576504mDc{aMarek Kasik <mkasik@redhat.com> - 2.4.11-15XA- Fix shellcheck warning (coverity)
- Related: #1368141
N +E N jS]{bMarek Kasik <mkasik@redhat.com> - 2.8-14\M- Fix rendering in monochrome mode
- Resolves: #1657479R]1bMarek Kasik <mkasik@redhat.com> - 2.8-13[- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1645218dQ]obMarek Kasik <mkasik@redhat.com> - 2.8-12[o- Fix loading of avar tables
- Resolves: #1576504|P] bMarek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504[OeUbRichard Hughes <rhughes@redhat.com> - 2.8-10[- Update to 2.8
- Resolves: #1576504mNc{bMarek Kasik <mkasik@redhat.com> - 2.4.11-15XA- Fix shellcheck warning (coverity)
- Related: #1368141Mc+bMarek Kasik <mkasik@redhat.com> - 2.4.11-14X@- Backport functions for reading signed values from stream
- Resolves: #1381678zLcbMarek Kasik <mkasik@redhat.com> - 2.4.11-13X- Don't show path of non-existing libtool file
- Resolves: #1368141
z iQW z |Z] cMarek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504[YeUcRichard Hughes <rhughes@redhat.com> - 2.8-10[- Update to 2.8
- Resolves: #1576504mXc{cMarek Kasik <mkasik@redhat.com> - 2.4.11-15XA- Fix shellcheck warning (coverity)
- Related: #1368141Wc+cMarek Kasik <mkasik@redhat.com> - 2.4.11-14X@- Backport functions for reading signed values from stream
- Resolves: #1381678zVccMarek Kasik <mkasik@redhat.com> - 2.4.11-13X- Don't show path of non-existing libtool file
- Resolves: #1368141UcMcMarek Kasik <mkasik@redhat.com> - 2.4.11-12V3- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268Tm;bMarek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_ @- Test bitmap size earlier for PNGs
- Fix memory leak in pngshim.c
- Resolves: #1891635
i p i ac+dMarek Kasik <mkasik@redhat.com> - 2.4.11-14X@- Backport functions for reading signed values from stream
- Resolves: #1381678z`cdMarek Kasik <mkasik@redhat.com> - 2.4.11-13X- Don't show path of non-existing libtool file
- Resolves: #1368141_cMdMarek Kasik <mkasik@redhat.com> - 2.4.11-12V3- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268^m;cMarek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_ @- Test bitmap size earlier for PNGs
- Fix memory leak in pngshim.c
- Resolves: #1891635j]]{cMarek Kasik <mkasik@redhat.com> - 2.8-14\M- Fix rendering in monochrome mode
- Resolves: #1657479\]1cMarek Kasik <mkasik@redhat.com> - 2.8-13[- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1645218d[]ocMarek Kasik <mkasik@redhat.com> - 2.8-12[o- Fix loading of avar tables
- Resolves: #1576504
" 2LU " i eFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-18P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildhm;dMarek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_ @- Test bitmap size earlier for PNGs
- Fix memory leak in pngshim.c
- Resolves: #1891635jg]{dMarek Kasik <mkasik@redhat.com> - 2.8-14\M- Fix rendering in monochrome mode
- Resolves: #1657479f]1dMarek Kasik <mkasik@redhat.com> - 2.8-13[- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1645218de]odMarek Kasik <mkasik@redhat.com> - 2.8-12[o- Fix loading of avar tables
- Resolves: #1576504|d] dMarek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504[ceUdRichard Hughes <rhughes@redhat.com> - 2.8-10[- Update to 2.8
- Resolves: #1576504mbc{dMarek Kasik <mkasik@redhat.com> - 2.4.11-15XA- Fix shellcheck warning (coverity)
- Related: #1368141
Vb re]eFilip Januš <fjanus@redhat.com> - 2.0.35-27_- Fix CVE-2016-5766
- Resolves: #1356813
- Upstream patch: https://github.com/libgd/libgd/commit/aba3db8Nqa?eDaniel Mach <dmach@redhat.com> - 2.0.35-26RU- Mass rebuild 2014-01-24Npa?eDaniel Mach <dmach@redhat.com> - 2.0.35-25Rk- Mass rebuild 2013-12-27Loc9eHonza Horak <hhorak@redhat.com> - 2.0.35-24QP<A- Fix build on aarch64TncIeHonza Horak <hhorak@redhat.com> - 2.0.35-23QP<@- Fix issues found by Coveritym eFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-22Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild\l]_eAdam Tkac <atkac redhat com> - 2.0.35-21P9@- rebuild due to "jpeg8-ABI" feature dropPk]GeAdam Tkac <atkac redhat com> - 2.0.35-20PO@- rebuild against new libjpeg&jckeHonza Horak <hhorak@redhat.com> - 2.0.35-19P<- Spec file cleanup
- Compile and run test suite during build
- Using chrpath to get rid of --rpath in gd-progs
$ dgl u $ N{a?fDaniel Mach <dmach@redhat.com> - 2.0.35-26RU- Mass rebuild 2014-01-24Nza?fDaniel Mach <dmach@redhat.com> - 2.0.35-25Rk- Mass rebuild 2013-12-27Lyc9fHonza Horak <hhorak@redhat.com> - 2.0.35-24QP<A- Fix build on aarch64TxcIfHonza Horak <hhorak@redhat.com> - 2.0.35-23QP<@- Fix issues found by Coverityw fFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-22Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild\v]_fAdam Tkac <atkac redhat com> - 2.0.35-21P9@- rebuild due to "jpeg8-ABI" feature dropPu]GfAdam Tkac <atkac redhat com> - 2.0.35-20PO@- rebuild against new libjpeg&tckfHonza Horak <hhorak@redhat.com> - 2.0.35-19P<- Spec file cleanup
- Compile and run test suite during build
- Using chrpath to get rid of --rpath in gd-progss fFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-18P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
" \d q " Lc9gHonza Horak <hhorak@redhat.com> - 2.0.35-24QP<A- Fix build on aarch64TcIgHonza Horak <hhorak@redhat.com> - 2.0.35-23QP<@- Fix issues found by Coverity gFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-22Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild\ ]_gAdam Tkac <atkac redhat com> - 2.0.35-21P9@- rebuild due to "jpeg8-ABI" feature dropP]GgAdam Tkac <atkac redhat com> - 2.0.35-20PO@- rebuild against new libjpeg&~ckgHonza Horak <hhorak@redhat.com> - 2.0.35-19P<- Spec file cleanup
- Compile and run test suite during build
- Using chrpath to get rid of --rpath in gd-progs} gFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-18P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild |e]fFilip Januš <fjanus@redhat.com> - 2.0.35-27_- Fix CVE-2016-5766
- Resolves: #1356813
- Upstream patch: https://github.com/libgd/libgd/commit/aba3db8
& ^ t! & hFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-22Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild\
]_hAdam Tkac <atkac redhat com> - 2.0.35-21P9@- rebuild due to "jpeg8-ABI" feature dropP ]GhAdam Tkac <atkac redhat com> - 2.0.35-20PO@- rebuild against new libjpeg&ckhHonza Horak <hhorak@redhat.com> - 2.0.35-19P<- Spec file cleanup
- Compile and run test suite during build
- Using chrpath to get rid of --rpath in gd-progs hFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-18P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild e]gFilip Januš <fjanus@redhat.com> - 2.0.35-27_- Fix CVE-2016-5766
- Resolves: #1356813
- Upstream patch: https://github.com/libgd/libgd/commit/aba3db8Na?gDaniel Mach <dmach@redhat.com> - 2.0.35-26RU- Mass rebuild 2014-01-24Na?gDaniel Mach <dmach@redhat.com> - 2.0.35-25Rk- Mass rebuild 2013-12-27
e r+V: e Dt
570aef75009a72d1f785eeeb0cf1e9b1c5113c73c46a3a7c2eebe0f87a44655bDs
bb408fa95bcf415eb2f22a47b9881db4b7939785d83fa16655c8dc2709c0e454Dr
076ae5a31f58ce2e33f04de674fed5086fd8f72a8e802528d833f3033c017469Dq
9a97f6e2d20a2e98ad20844706c47bf2fc689c6975c67067aa46d4ab03c1e47aDp
b3523f6bd479abca1bc4c70f870af2423e9747ad2cb185692334588138742f50Do
0debd7af9974202b568d8b8c1c87e8d70139dd2dbc62ba9bf7a9e72fe64c3990Dn
d0b3530450134364f48fc2529fb28b6ba4924562e2743be8a4a9531df24ce934Dm
d9df089dfd6da09a0d335f5f7217eb49fb786af4bc6bdc86f8f5780e9588cb54Dl
aa4d5c25ee0ab0c6200041d7babcc2186123b17af2126662b27bed0013787faaDk
eba7c5a667e7db88684d709d6c7106aa972e55a41d27a79736afb8d0eec1de6dDj
a4c7433fc835c54d8bf366a26b4dc41534ab33b1bd9437ea1ba37c1150958611Di
3e01c37b17dac632211d855274ca843a3926cde218387315d5124f7b90008656Dh
8c0250c573335738373e9064ccc227bb57bf3a3ce5d859aa2fe9f129bbc28592
Z x { \]_iAdam Tkac <atkac redhat com> - 2.0.35-21P9@- rebuild due to "jpeg8-ABI" feature dropP]GiAdam Tkac <atkac redhat com> - 2.0.35-20PO@- rebuild against new libjpeg&ckiHonza Horak <hhorak@redhat.com> - 2.0.35-19P<- Spec file cleanup
- Compile and run test suite during build
- Using chrpath to get rid of --rpath in gd-progs iFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-18P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild e]hFilip Januš <fjanus@redhat.com> - 2.0.35-27_- Fix CVE-2016-5766
- Resolves: #1356813
- Upstream patch: https://github.com/libgd/libgd/commit/aba3db8Na?hDaniel Mach <dmach@redhat.com> - 2.0.35-26RU- Mass rebuild 2014-01-24Na?hDaniel Mach <dmach@redhat.com> - 2.0.35-25Rk- Mass rebuild 2013-12-27L
c9hHonza Horak <hhorak@redhat.com> - 2.0.35-24QP<A- Fix build on aarch64T cIhHonza Horak <hhorak@redhat.com> - 2.0.35-23QP<@- Fix issues found by Coverity
! d
m x ! { cjRay Strode <rstrode@redhat.com> - 3.28.2-25_m- Backport some libgdm leak fixes from upstream
Resolves: #1882821` _ejRay Strode <rstrode@redhat.com> 3.28.2-24_cO- Fix FD leak on logout
Resolves: #1877583scjRay Strode <rstrode@redhat.com> - 3.28.2-23^- Support exotic keyboard layouts better
Related: #1734143 e]iFilip Januš <fjanus@redhat.com> - 2.0.35-27_- Fix CVE-2016-5766
- Resolves: #1356813
- Upstream patch: https://github.com/libgd/libgd/commit/aba3db8Na?iDaniel Mach <dmach@redhat.com> - 2.0.35-26RU- Mass rebuild 2014-01-24Na?iDaniel Mach <dmach@redhat.com> - 2.0.35-25Rk- Mass rebuild 2013-12-27Lc9iHonza Horak <hhorak@redhat.com> - 2.0.35-24QP<A- Fix build on aarch64TcIiHonza Horak <hhorak@redhat.com> - 2.0.35-23QP<@- Fix issues found by Coverity iFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-22Q@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
t '3R t s%cmRay Strode <rstrode@redhat.com> - 3.28.2-23^- Support exotic keyboard layouts better
Related: #1734143e$cklRay Strode <rstrode@redhat.com> - 3.28.2-26_#- Fix warning during unlock
Related: #1897063{#clRay Strode <rstrode@redhat.com> - 3.28.2-25_m- Backport some libgdm leak fixes from upstream
Resolves: #1882821`"_elRay Strode <rstrode@redhat.com> 3.28.2-24_cO- Fix FD leak on logout
Resolves: #1877583s!clRay Strode <rstrode@redhat.com> - 3.28.2-23^- Support exotic keyboard layouts better
Related: #1734143{ ckRay Strode <rstrode@redhat.com> - 3.28.2-25_m- Backport some libgdm leak fixes from upstream
Resolves: #1882821` _ekRay Strode <rstrode@redhat.com> 3.28.2-24_cO- Fix FD leak on logout
Resolves: #1877583s ckRay Strode <rstrode@redhat.com> - 3.28.2-23^- Support exotic keyboard layouts better
Related: #1734143
A` `-_eoRay Strode <rstrode@redhat.com> 3.28.2-24_cO- Fix FD leak on logout
Resolves: #1877583s,coRay Strode <rstrode@redhat.com> - 3.28.2-23^- Support exotic keyboard layouts better
Related: #1734143{+cnRay Strode <rstrode@redhat.com> - 3.28.2-25_m- Backport some libgdm leak fixes from upstream
Resolves: #1882821`*_enRay Strode <rstrode@redhat.com> 3.28.2-24_cO- Fix FD leak on logout
Resolves: #1877583s)cnRay Strode <rstrode@redhat.com> - 3.28.2-23^- Support exotic keyboard layouts better
Related: #1734143e(ckmRay Strode <rstrode@redhat.com> - 3.28.2-26_#- Fix warning during unlock
Related: #1897063{'cmRay Strode <rstrode@redhat.com> - 3.28.2-25_m- Backport some libgdm leak fixes from upstream
Resolves: #1882821`&_emRay Strode <rstrode@redhat.com> 3.28.2-24_cO- Fix FD leak on logout
Resolves: #1877583
l +M l {5cqRay Strode <rstrode@redhat.com> - 3.28.2-25_m- Backport some libgdm leak fixes from upstream
Resolves: #1882821`4_eqRay Strode <rstrode@redhat.com> 3.28.2-24_cO- Fix FD leak on logout
Resolves: #1877583s3cqRay Strode <rstrode@redhat.com> - 3.28.2-23^- Support exotic keyboard layouts better
Related: #1734143e2ckpRay Strode <rstrode@redhat.com> - 3.28.2-26_#- Fix warning during unlock
Related: #1897063{1cpRay Strode <rstrode@redhat.com> - 3.28.2-25_m- Backport some libgdm leak fixes from upstream
Resolves: #1882821`0_epRay Strode <rstrode@redhat.com> 3.28.2-24_cO- Fix FD leak on logout
Resolves: #1877583s/cpRay Strode <rstrode@redhat.com> - 3.28.2-23^- Support exotic keyboard layouts better
Related: #1734143{.coRay Strode <rstrode@redhat.com> - 3.28.2-25_m- Backport some libgdm leak fixes from upstream
Resolves: #1882821
t "Ah t s=ctRay Strode <rstrode@redhat.com> - 3.28.2-23^- Support exotic keyboard layouts better
Related: #1734143{<csRay Strode <rstrode@redhat.com> - 3.28.2-25_m- Backport some libgdm leak fixes from upstream
Resolves: #1882821`;_esRay Strode <rstrode@redhat.com> 3.28.2-24_cO- Fix FD leak on logout
Resolves: #1877583s:csRay Strode <rstrode@redhat.com> - 3.28.2-23^- Support exotic keyboard layouts better
Related: #1734143{9crRay Strode <rstrode@redhat.com> - 3.28.2-25_m- Backport some libgdm leak fixes from upstream
Resolves: #1882821`8_erRay Strode <rstrode@redhat.com> 3.28.2-24_cO- Fix FD leak on logout
Resolves: #1877583s7crRay Strode <rstrode@redhat.com> - 3.28.2-23^- Support exotic keyboard layouts better
Related: #1734143e6ckqRay Strode <rstrode@redhat.com> - 3.28.2-26_#- Fix warning during unlock
Related: #1897063
A` eDckuRay Strode <rstrode@redhat.com> - 3.28.2-26_#- Fix warning during unlock
Related: #1897063{CcuRay Strode <rstrode@redhat.com> - 3.28.2-25_m- Backport some libgdm leak fixes from upstream
Resolves: #1882821`B_euRay Strode <rstrode@redhat.com> 3.28.2-24_cO- Fix FD leak on logout
Resolves: #1877583sAcuRay Strode <rstrode@redhat.com> - 3.28.2-23^- Support exotic keyboard layouts better
Related: #1734143e@cktRay Strode <rstrode@redhat.com> - 3.28.2-26_#- Fix warning during unlock
Related: #1897063{?ctRay Strode <rstrode@redhat.com> - 3.28.2-25_m- Backport some libgdm leak fixes from upstream
Resolves: #1882821`>_etRay Strode <rstrode@redhat.com> 3.28.2-24_cO- Fix FD leak on logout
Resolves: #1877583
e r+V: e D
3e669a493af1a126cce0a77eecae0864765c9b701b5640962ecfa5a8ec1afc30D
36fed680eaa8454cb71901db4b5393c54c16fdfc72c0901bc461231559e164efD
48db0a9dafc6ecf4c0b955075d04ff198a44fa5b1bdea37a0f03af3d9d75e1a6D~
5268af6fbc32bf7411d9d0df3379c86428de9b0d25cbcbd8a6f1703caac79829D}
d977ef2c9e09f15898d44de8446c4e0984f357c637fa6b2194f05cf87e8abc29D|
c4a681b60727112a37ddcabfef6cfcafd36496fa1748cd9e419ad0d579eeb740D{
3b2af1cbe29d541a936e2a76af8f1cc07780ea069f8cc04404f4b2f85184abfcDz
b3306affa940e0e2ab3cd9caec8dda837e626fe8043ec669f8465d62b7b08ed5Dy
c0c2b524cce50372b06ea8c7a4618f02d379ce6a9cbf9b2a7bbd6e21c4a80dd7Dx
666bdeb5237f9bac4020a4b5da35bdc2b27ec3fe6d28b4e3823d1ad165c013b5Dw
73e2cf9bb12255322e5252ec0b918e3e62d5c6df5b610dd7d2ecf351b34f1365Dv
0f6e2c2f22024dd4f9db5cb729bdd2f2744882ba37e965a50b954f861c99243bDu
9b205c9658e9caf5ecd6d928179b7e7b36aa629b18e33540805f21a0d0b9f939
l xx l ML_?vDaniel Mach <dmach@redhat.com> - 0.2.0-18RU- Mass rebuild 2014-01-24MK_?vDaniel Mach <dmach@redhat.com> - 0.2.0-17Rk- Mass rebuild 2013-12-27iJeqvNils Philippsen <nils@redhat.com> - 0.2.0-16R@- remove BR: w3m, it's only needed for "make dist"MIo/vRex Dieter <rdieter@fedoraproject.org> - 0.2.0-15R- rebuild (exiv2)OHo3vRex Dieter <rdieter@fedoraproject.org> - 0.2.0-14R- rebuild (openexr)[GkOvKalev Lember <kalevlember@gmail.com> - 0.2.0-13R1- Rebuilt for ilmbase soname bumpFvFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.0-12Q- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_RebuildiEeovNils Philippsen <nils@redhat.com> - 0.2.0-11Qo@- replace lua-5.2 patch by upstream commit
- fix buffer overflow in and add plausibility checks to ppm-load op
(CVE-2012-4433)
- fix multi-lib issue in generated documentation
[ Obi [ iTeqwNils Philippsen <nils@redhat.com> - 0.2.0-16R@- remove BR: w3m, it's only needed for "make dist"MSo/wRex Dieter <rdieter@fedoraproject.org> - 0.2.0-15R- rebuild (exiv2)ORo3wRex Dieter <rdieter@fedoraproject.org> - 0.2.0-14R- rebuild (openexr)[QkOwKalev Lember <kalevlember@gmail.com> - 0.2.0-13R1- Rebuilt for ilmbase soname bumpPwFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.0-12Q- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_RebuildiOeowNils Philippsen <nils@redhat.com> - 0.2.0-11Qo@- replace lua-5.2 patch by upstream commit
- fix buffer overflow in and add plausibility checks to ppm-load op
(CVE-2012-4433)
- fix multi-lib issue in generated documentationVNeKvJosef Ridky <jridky@redhat.com> - 0.2.0-19.1aq@- fix CVE-2021-45463 (#2035416)UMaMvJosef Ridky <jridky@redhat.com> - 0.2.0-19X@- add Requires: dcraw (#1279144)
' `' w ' M]o/xRex Dieter <rdieter@fedoraproject.org> - 0.2.0-15R- rebuild (exiv2)O\o3xRex Dieter <rdieter@fedoraproject.org> - 0.2.0-14R- rebuild (openexr)[[kOxKalev Lember <kalevlember@gmail.com> - 0.2.0-13R1- Rebuilt for ilmbase soname bumpZxFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.0-12Q- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_RebuildiYeoxNils Philippsen <nils@redhat.com> - 0.2.0-11Qo@- replace lua-5.2 patch by upstream commit
- fix buffer overflow in and add plausibility checks to ppm-load op
(CVE-2012-4433)
- fix multi-lib issue in generated documentationVXeKwJosef Ridky <jridky@redhat.com> - 0.2.0-19.1aq@- fix CVE-2021-45463 (#2035416)UWaMwJosef Ridky <jridky@redhat.com> - 0.2.0-19X@- add Requires: dcraw (#1279144)MV_?wDaniel Mach <dmach@redhat.com> - 0.2.0-18RU- Mass rebuild 2014-01-24MU_?wDaniel Mach <dmach@redhat.com> - 0.2.0-17Rk- Mass rebuild 2013-12-27
] DCV ] [ekOyKalev Lember <kalevlember@gmail.com> - 0.2.0-13R1- Rebuilt for ilmbase soname bumpdyFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.0-12Q- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_RebuildiceoyNils Philippsen <nils@redhat.com> - 0.2.0-11Qo@- replace lua-5.2 patch by upstream commit
- fix buffer overflow in and add plausibility checks to ppm-load op
(CVE-2012-4433)
- fix multi-lib issue in generated documentationVbeKxJosef Ridky <jridky@redhat.com> - 0.2.0-19.1aq@- fix CVE-2021-45463 (#2035416)UaaMxJosef Ridky <jridky@redhat.com> - 0.2.0-19X@- add Requires: dcraw (#1279144)M`_?xDaniel Mach <dmach@redhat.com> - 0.2.0-18RU- Mass rebuild 2014-01-24M__?xDaniel Mach <dmach@redhat.com> - 0.2.0-17Rk- Mass rebuild 2013-12-27i^eqxNils Philippsen <nils@redhat.com> - 0.2.0-16R@- remove BR: w3m, it's only needed for "make dist"
2 ^R 2 n zFedora Release Engineering <releng@fedoraproject.org> - 2.2.2-2V- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_RebuildXmaQzPaul Howarth <paul@city-fan.org> - 2.2.2-1V- Update to 2.2.2
- geoipupdate now calls fsync on the database directory after a rename to
make it durable in the event of a crash
- Update autotools patchVleKyJosef Ridky <jridky@redhat.com> - 0.2.0-19.1aq@- fix CVE-2021-45463 (#2035416)UkaMyJosef Ridky <jridky@redhat.com> - 0.2.0-19X@- add Requires: dcraw (#1279144)Mj_?yDaniel Mach <dmach@redhat.com> - 0.2.0-18RU- Mass rebuild 2014-01-24Mi_?yDaniel Mach <dmach@redhat.com> - 0.2.0-17Rk- Mass rebuild 2013-12-27iheqyNils Philippsen <nils@redhat.com> - 0.2.0-16R@- remove BR: w3m, it's only needed for "make dist"Mgo/yRex Dieter <rdieter@fedoraproject.org> - 0.2.0-15R- rebuild (exiv2)Ofo3yRex Dieter <rdieter@fedoraproject.org> - 0.2.0-14R- rebuild (openexr)
r zFedora Release Engineering <releng@fedoraproject.org> - 2.4.0-2Yx@- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild'qaozPaul Howarth <paul@city-fan.org> - 2.4.0-1Y(- Update to 2.4.0
- geoipupdate now checks that 0p zFedora Release Engineering <releng@fedoraproject.org> - 2.3.1-2X@- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild^oa]zPaul Howarth <paul@city-fan.org> - 2.3.1-1Xn5@- Update to 2.3.1
- geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
greater
- Previously, on an invalid gzip file, geoipupdate would output binary data
to stderr; it now displays an appropriate error message
- Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
- $(sysconfdir) is now created if it doesn't exist (GH#33)
- The sample config file is now usable (GH#33) the database directory is writable: if it is
not, it reports the problem and aborts
- geoipupdate now acquires a lock when starting up to ensure only one
instance may run at a time: a new option, 'LockFile', exists to set the
file to use as a lock ('.geoipupdate.lock' in the database directory by
default)
- geoipupdate now prints out additional information from the server when a
download request results in something other than HTTP status 2xx; this
provides more information when the API does not respond with a database
file
- ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
- Previously, a variable named 'ERROR' was used, which caused issues building
on Windows (GH#36)
- Drop EL-5 support
- Drop BuildRoot: and Group: tags
- Drop explicit buildroot cleaning in %install section
- Drop explicit %clean section
- noarch subpackages always available now
- libcurl-devel always available now
" d " >ta zPaul Howarth <paul@city-fan.org> - 2.5.0-1Ye- Update to 2.5.0
- Replace use of strnlen() due to lack of universal availability (GH#71)
- Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
- Remove unused base64 library (GH#68)
- Add the new configuration option 'PreserveFileTimes'; if set, the
downloaded files will get the same modification times as their original on
the server (default is '0') (GH#63)
- Use the correct types when calling 'curl_easy_setopt()'; this fixes
warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
- In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
'ProductIds' option was renamed to 'EditionIDs'; the old options will
continue to work, but upgrading to the new names is recommended for
forward compatibilitys %zFedora Release Engineering <releng@fedoraproject.org> - 2.4.0-3Y- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
! x {Fedora Release Engineering <releng@fedoraproject.org> - 2.2.2-2V- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_RebuildXwaQ{Paul Howarth <paul@city-fan.org> - 2.2.2-1V- Update to 2.2.2
- geoipupdate now calls fsync on the database directory after a rename to
make it durable in the event of a crash
- Update autotools patchvi zMichal Ruprich <mruprich@redhat.com> - 2.5.0-2dFo@- Resolves: #2188376 - Add support for hashed license keys to geoipupdateyui zMichal Ruprich <mruprich@redhat.com> - 2.5.0-1\]o@- Resolves: #1643470 - Add geoipupdate package
- Initial commit
| {Fedora Release Engineering <releng@fedoraproject.org> - 2.4.0-2Yx@- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild'{ao{Paul Howarth <paul@city-fan.org> - 2.4.0-1Y(- Update to 2.4.0
- geoipupdate now checks that 4z {Fedora Release Engineering <releng@fedoraproject.org> - 2.3.1-2X@- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild^ya]{Paul Howarth <paul@city-fan.org> - 2.3.1-1Xn5@- Update to 2.3.1
- geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
greater
- Previously, on an invalid gzip file, geoipupdate would output binary data
to stderr; it now displays an appropriate error message
- Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
- $(sysconfdir) is now created if it doesn't exist (GH#33)
- The sample config file is now usable (GH#33) the database directory is writable: if it is
not, it reports the problem and aborts
- geoipupdate now acquires a lock when starting up to ensure only one
instance may run at a time: a new option, 'LockFile', exists to set the
file to use as a lock ('.geoipupdate.lock' in the database directory by
default)
- geoipupdate now prints out additional information from the server when a
download request results in something other than HTTP status 2xx; this
provides more information when the API does not respond with a database
file
- ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
- Previously, a variable named 'ERROR' was used, which caused issues building
on Windows (GH#36)
- Drop EL-5 support
- Drop BuildRoot: and Group: tags
- Drop explicit buildroot cleaning in %install section
- Drop explicit %clean section
- noarch subpackages always available now
- libcurl-devel always available now
" d " >~a {Paul Howarth <paul@city-fan.org> - 2.5.0-1Ye- Update to 2.5.0
- Replace use of strnlen() due to lack of universal availability (GH#71)
- Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
- Remove unused base64 library (GH#68)
- Add the new configuration option 'PreserveFileTimes'; if set, the
downloaded files will get the same modification times as their original on
the server (default is '0') (GH#63)
- Use the correct types when calling 'curl_easy_setopt()'; this fixes
warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
- In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
'ProductIds' option was renamed to 'EditionIDs'; the old options will
continue to work, but upgrading to the new names is recommended for
forward compatibility} %{Fedora Release Engineering <releng@fedoraproject.org> - 2.4.0-3Y- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
9 x 9 e |Andrew Price <anprice@redhat.com> - 3.1.10-6Z&@- gfs2_edit: Print offsets of indirect pointers
Resolves: rhbz#15189387e |Andrew Price <anprice@redhat.com> - 3.1.10-5Y- Update URL in spec file
Resolves: rhbz#1501738
- fsck.gfs2: Make -p, -n and -y conflicting options
Resolves: rhbz#1507091e-|Andrew Price <anprice@redhat.com> - 3.1.10-4Y- gfs2_edit savemeta: Fix up saving of dinodes/symlinks
Resolves: rhbz#1482542ue|Andrew Price <anprice@redhat.com> - 3.1.10-3X- libgfs2: Issue one write per rgrp when creating them
- mkfs.gfs2: Fix resource group alignment issue
- mkfs.gfs2: Free unnecessary cached pages, disable readahead
Resolves: rhbz#1440269 i {Michal Ruprich <mruprich@redhat.com> - 2.5.0-2dFo@- Resolves: #2188376 - Add support for hashed license keys to geoipupdateyi {Michal Ruprich <mruprich@redhat.com> - 2.5.0-1\]o@- Resolves: #1643470 - Add geoipupdate package
- Initial commit
: s* : lgs|Andrew Price <anprice@redhat.com> - 3.1.10-10^- libgfs2: Use sizeof for 'reserved' fields in ondisk.c
- fsck.gfs2: Disambiguate 'check_data'
- gfs2-utils: Accept a char* instead of a buffer head in gfs2_check_meta
- fsck.gfs2: Disambiguate check_metalist
- fsck.gfs2: Fix segfault in build_and_check_metalist
- fsck.gfs2: Retain context for indirect pointers in ->check_metalist
- fsck.gfs2: Clear bad indirect block pointers when bitmap meets expectations
Resolves: rhbz#14877264e|Andrew Price <anprice@redhat.com> - 3.1.10-9[- fsck.gfs2: Don't check fs formats we don't recognise
- libgfs2: Fix pointer cast byte order issue
Resolves: rhbz#1616389
e7|Andrew Price <anprice@redhat.com> - 3.1.10-8[,- glocktop: Remove a non-existent flag from the usage string
Resolves: rhbz#1544944 e/|Andrew Price <anprice@redhat.com> - 3.1.10-7Z>- mkfs.gfs2: Scale down journal size for smaller devices
Resolves: rhbz#1498068
4 ^ 4 5 q{}Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.[ qG}Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(@- move instaweb to separate git-instaweb subpackage.
Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
Resolves: #1284081
k3|Andrew Price <anprice@redhat.com> - 3.1.10-11.1_u- mkfs.gfs2: Don't use i/o limits hints <4K for block size
Resolves: rhbz#1853625 gW|Andrew Price <anprice@redhat.com> - 3.1.10-11^(@- gfs2_jadd: Handle out-of-space issues
- gfs2_jadd: error handling overhaul
Resolves: rhbz#1837640
u T u i)}Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1Oq/}Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059 iQ}Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.
i)}Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.
l Kl { }Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067:k }Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008u=}Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601uo}Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387
G; iQ~Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.i)~Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.5q{~Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.
-!l : k ~Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008u=~Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601uo~Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387i)~Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1Oq/~Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059
X { X 5 q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.[ qGSebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(@- move instaweb to separate git-instaweb subpackage.
Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
Resolves: #1284081 s ~Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365 { ~Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067
u T u $i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1O#q/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059 "iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.!i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.
l Kl ({ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067:'k Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008&u=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601%uoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387
G; +iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.*i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.5)q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.
-!l :0k Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008/u=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601.uoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387-i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1O,q/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059
X { X 54q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.[3qGSebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(@- move instaweb to separate git-instaweb subpackage.
Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
Resolves: #12840812s Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #21883651{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067
u T u 8i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1O7q/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059 6iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.5i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.
l Kl <{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067:;k Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008:u=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-526019uoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387
e r+V: e D
bf6b711d995c2cfcd7c146204145b34ce97998804eb37c62306f383d81097962D
7f8cb3fbedf15a4146ccc43a641071e7f99fbde04c72526476d5cd90545e4644D
6f603069d8c52e3cf80cd2299fead7f8539598c42a9cd85ae42363724530da93D
6a1b6459f1f724a4030deb520745ead7657fcaae71a35ba2905022d5da341997D
5c264476a12da876822ba10518576ea9ba06566847192d58c4642df8ad70f0deD
eace35203de4fbc64ea081a27197877a56615d25b23b30e79f559209ff736310D
ae71e0763354a3a81b14cb8bd4de22629e35e59b0045199ad6958323fac31e30D
2f40644349b7b023a5ac1b6045dc14e19a4d5af38ffd90e8907d4b98929b12b2D
e07e25a4f64939f2fc2c8dfbcd0358561025cfc19d01318d054b161d02e76a80D
4a1eda7aca52060e944393a7b40798a1e90bbd8b4ffcf3bdfe5779ccbe2acc43D
e4d4ae004f1e33c3542d967b6301d6307f9a848be51a7008ff5726259a3e5a5dD
a0b6efe5d9993351a08c5873bc1be89455d96a5535d9bf69e24384ab21850577D
c37e4471ce6ce9e562309ca353e9b1cd0725d1ec5d073e80ad7a9ba3f32732c1
G; ?iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.>i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.5=q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.
-!l :Dk Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008Cu=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601BuoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387Ai)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1O@q/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059
X { X 5Hq{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.[GqGSebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(@- move instaweb to separate git-instaweb subpackage.
Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
Resolves: #1284081Fs Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365E{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067
u T u Li)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1OKq/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059 JiQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.Ii)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.
l Kl P{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067:Ok Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008Nu=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601MuoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387
G; SiQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.Ri)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.5Qq{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.
-!l :Xk Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008Wu=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601VuoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387Ui)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1OTq/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059
X { X 5\q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.[[qGSebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(@- move instaweb to separate git-instaweb subpackage.
Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
Resolves: #1284081Zs Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365Y{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067
u T u `i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1O_q/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059 ^iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.]i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.
l Kl d{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067:ck Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008bu=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601auoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387
G; giQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.fi)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.5eq{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.
-!l :lk Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008ku=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601juoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387ii)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1Ohq/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059
X { X 5pq{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.[oqGSebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(@- move instaweb to separate git-instaweb subpackage.
Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
Resolves: #1284081ns Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365m{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067
u T u ti)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1Osq/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059 riQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.qi)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.
l Kl x{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067:wk Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008vu=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601uuoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387
G; {iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.zi)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.5yq{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.
-!l : k Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008u=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601~uoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387}i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1O|q/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059
X { X 5q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.[qGSebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(@- move instaweb to separate git-instaweb subpackage.
Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
Resolves: #1284081s Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067
u T u i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1Oq/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059 iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.
l Kl { Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067: k Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008
u=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601 uoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387
G; iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.5
q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.
-!l :k Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008u=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601uoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1Oq/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059
X { X 5q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.[qGSebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(@- move instaweb to separate git-instaweb subpackage.
Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
Resolves: #1284081s Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067
u T u i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1Oq/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059 iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.
l Kl { Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067: k Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008 u=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601 uoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387
G; #iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well."i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.5!q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.
-!l :(k Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008'u=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601&uoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387%i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1O$q/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059
X { X 5,q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.[+qGSebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(@- move instaweb to separate git-instaweb subpackage.
Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
Resolves: #1284081*s Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365){ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067
u T u 0i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1O/q/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059 .iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.-i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.
l Kl 4{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067:3k Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-110082u=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-526011uoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387
G; 7iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.6i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.55q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.
-!l :<k Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008;u=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601:uoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-13879i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1O8q/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059
X { X 5@q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.[?qGSebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(@- move instaweb to separate git-instaweb subpackage.
Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
Resolves: #1284081>s Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365={ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067
e r+V: e D
497230bf98b04ad42a5e86190210020c9d693a673e748256dfdae01fda278f6bD
e3c6ac455f3f655e70629ab69610a70ab4f4e55490536ec08dc32ec06031f28bD
6c21b000ed4eaee655f575de1d380dded8d228f9631df396279ba89debbe6faeD
ce44bc6fbc305c3861c8d26e236f8872ccd1827001528bced75ea5a087db84d4D
84b71cd28250d68d8dd0c9a9da4983782f0ef2c5888c5734b7d12841ff61313bD
ee8a7377ed0c955a55eec8ea39cbb91e5c2b99a4b050e0f4136075e5c7c87796D
b649840984828bb702a86f59b74053d9fb62a7d9512eed421f9ac6fd2c5e648aD
e6b35740952d21b92b5fd63b78ed0f5a4649c9aeb22cf9cb5af2d6c5c8a86dc3D
37036b6e228127d501401f8546d504c70f6e51fcc1271a33342effbc6d6a62cdD
44fdf0fd6b2ea0867e2530297d92b753e9b67534567ffa09595ff50bc74c9886D
4f181bcb90816497b5e18006556c8e9c5e26bb5a1da4f5be2acce0472c81866dD
087a9eb6f7e5a03f17d35ced5aea62e436334f59bd027880ae3be3eb69257219D
37146ed7255163cbdf3bb94a0f5e8ea9cb46eeddd0d269546fb213017f212548
u T u Di)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1OCq/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059 BiQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.Ai)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.
l Kl H{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067:Gk Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008Fu=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601EuoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387
G; KiQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.Ji)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.5Iq{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.
-!l :Pk Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008Ou=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601NuoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387Mi)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1OLq/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059
X { X 5Tq{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.[SqGSebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(@- move instaweb to separate git-instaweb subpackage.
Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
Resolves: #1284081Rs Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365Q{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067
u T u Xi)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1OWq/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059 ViQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.Ui)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.
l Kl \{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067:[k Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008Zu=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601YuoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387
G; _iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.^i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.5]q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.
-!l :dk Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008cu=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601buoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387ai)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1O`q/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059
X { X 5hq{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.[gqGSebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(@- move instaweb to separate git-instaweb subpackage.
Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
Resolves: #1284081fs Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365e{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067
u T u li)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1Okq/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059 jiQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.ii)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.
l Kl p{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067:ok Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008nu=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601muoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387
G; siQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.ri)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.5qq{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.
-!l :xk Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008wu=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601vuoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387ui)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1Otq/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059
X { X 5|q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.[{qGSebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(@- move instaweb to separate git-instaweb subpackage.
Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
Resolves: #1284081zs Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365y{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067
u T u i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1Oq/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059 ~iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.}i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.
l Kl { Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067:k Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008u=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601uoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387 of flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| JP KS LX M\ N` Od Pg Ql Rp St Tx U{ V W X Y Z [ \ ] ^ _# `( a, b0 c4 d7 e< f@ hD iH jK kP lT mX n\ o_ pd qh rl sp ts ux v| w x z { | } ~ ' . 5 < C J Q X _ f m t { $ ( / 4 ; @ G N U \ c k r y " ) 0 7 > E L S Z a e i o t { &
G; iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.5q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.
-!l : k Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008 u=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601
uoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387 i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1Oq/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059
X { X 5q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.[qGSebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(@- move instaweb to separate git-instaweb subpackage.
Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
Resolves: #1284081s Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365
{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067
u T u i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1Oq/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059 iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.
l Kl { Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067:k Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008u=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601uoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387
G; iQPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H@- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.5q{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.
-!l : k Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008 u=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^@- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-52601 uoOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387 i)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1O q/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059
3 {~E 3 'uEMichael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^2- Backport patch to limit access to files when copying (CVE-2019-12450)
Resolves: #1722099o&iyJens Petersen <petersen@redhat.com> - 2.56.1-6^@- Backport patches for GDBus auth
Resolves: #1777221%aKRay Strode <rstrode@redhat.com> - 2.56.1-8_@- Backport patch to fix leak in g_signal_connect_object
Resolves: 1887862
Related: #1717000 $uEMichael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^2- Backport patch to limit access to files when copying (CVE-2019-12450)
Resolves: #1722099o#iyJens Petersen <petersen@redhat.com> - 2.56.1-6^@- Backport patches for GDBus auth
Resolves: #1777221"s Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365!{ Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c@- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067
M gc_ M .uEMichael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^2- Backport patch to limit access to files when copying (CVE-2019-12450)
Resolves: #1722099o-iyJens Petersen <petersen@redhat.com> - 2.56.1-6^@- Backport patches for GDBus auth
Resolves: #1777221h,u_Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`@- Fix CVE-2021-27219
Resolves: #1960596+aKRay Strode <rstrode@redhat.com> - 2.56.1-8_@- Backport patch to fix leak in g_signal_connect_object
Resolves: 1887862
Related: #1717000h*u_Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`@- Fix CVE-2021-27219
Resolves: #1960596)aKRay Strode <rstrode@redhat.com> - 2.56.1-8_@- Backport patch to fix leak in g_signal_connect_object
Resolves: 1887862
Related: #1717000(aKRay Strode <rstrode@redhat.com> - 2.56.1-8_@- Backport patch to fix leak in g_signal_connect_object
Resolves: 1887862
Related: #1717000
e r+V: e D(
79588570ccbd1df263463cf10a5d97ef323266e2abedfeb2fefafd34609a08dfD'
45fefc5e38fdda8877b262c158dcf1558ddd8b48fca3c2cd58b21d90e637096fD&
449fcca21f14ce7eafdbe53266ec3665872f2ce58cd9fd10b5ebe923ec7e12a2D%
cb1bff3dcdabc1801553de1e4bae164ca1ca0aa473eebe3e7afd8360d53dcad7D$
b65a283b2abdd24d3efe7491ad9fbe6bab445307ebf30070af80a0fd335b8560D#
d1d53660bffa4c0d03720470eba69755d1fe600ebcd13dc49a736237a10983ebD"
3c79cb3de74e545373941c507295276cafff95e505438c0bb771fd73deb0cf11D!
722785536ad769e0f2077e33c2c6aa02937baf01e2357433b6873c7a444503daD
0506a69ed5099abb05188f0ad253ebf7fb23f9516de5789b336622a000b67e9dD
e10f54c5d580e560b5d4611357d17fabf744c685d0597c57f65096c26149632cD
c1b656d07a2265aaad3c80a8e621f30eacc4d7131ecac7e66fade5608ce366e2D
0918063cb9b48c317391f431d587661c39613d95bd83d01ca9029660d7a1dfd9D
8509fe4641cb16b24f3aced3e8cb56ef28648055b03221b4d4cb4017259e1995
gU# 5aKRay Strode <rstrode@redhat.com> - 2.56.1-8_@- Backport patch to fix leak in g_signal_connect_object
Resolves: 1887862
Related: #1717000h4u_Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`@- Fix CVE-2021-27219
Resolves: #19605963aKRay Strode <rstrode@redhat.com> - 2.56.1-8_@- Backport patch to fix leak in g_signal_connect_object
Resolves: 1887862
Related: #17170002aKRay Strode <rstrode@redhat.com> - 2.56.1-8_@- Backport patch to fix leak in g_signal_connect_object
Resolves: 1887862
Related: #1717000 1uEMichael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^2- Backport patch to limit access to files when copying (CVE-2019-12450)
Resolves: #1722099o0iyJens Petersen <petersen@redhat.com> - 2.56.1-6^@- Backport patches for GDBus auth
Resolves: #1777221/aKRay Strode <rstrode@redhat.com> - 2.56.1-8_@- Backport patch to fix leak in g_signal_connect_object
Resolves: 1887862
Related: #1717000
t #Q t o<iyJens Petersen <petersen@redhat.com> - 2.56.1-6^@- Backport patches for GDBus auth
Resolves: #1777221h;u_Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`@- Fix CVE-2021-27219
Resolves: #1960596:aKRay Strode <rstrode@redhat.com> - 2.56.1-8_@- Backport patch to fix leak in g_signal_connect_object
Resolves: 1887862
Related: #17170009aKRay Strode <rstrode@redhat.com> - 2.56.1-8_@- Backport patch to fix leak in g_signal_connect_object
Resolves: 1887862
Related: #1717000 8uEMichael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^2- Backport patch to limit access to files when copying (CVE-2019-12450)
Resolves: #1722099o7iyJens Petersen <petersen@redhat.com> - 2.56.1-6^@- Backport patches for GDBus auth
Resolves: #1777221h6u_Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`@- Fix CVE-2021-27219
Resolves: #1960596
`.Q CaKRay Strode <rstrode@redhat.com> - 2.56.1-8_@- Backport patch to fix leak in g_signal_connect_object
Resolves: 1887862
Related: #1717000 BuEMichael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^2- Backport patch to limit access to files when copying (CVE-2019-12450)
Resolves: #1722099oAiyJens Petersen <petersen@redhat.com> - 2.56.1-6^@- Backport patches for GDBus auth
Resolves: #1777221h@u_Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`@- Fix CVE-2021-27219
Resolves: #1960596?aKRay Strode <rstrode@redhat.com> - 2.56.1-8_@- Backport patch to fix leak in g_signal_connect_object
Resolves: 1887862
Related: #1717000>aKRay Strode <rstrode@redhat.com> - 2.56.1-8_@- Backport patch to fix leak in g_signal_connect_object
Resolves: 1887862
Related: #1717000 =uEMichael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^2- Backport patch to limit access to files when copying (CVE-2019-12450)
Resolves: #1722099
M UQ M hJu_Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`@- Fix CVE-2021-27219
Resolves: #1960596IaKRay Strode <rstrode@redhat.com> - 2.56.1-8_@- Backport patch to fix leak in g_signal_connect_object
Resolves: 1887862
Related: #1717000hHu_Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`@- Fix CVE-2021-27219
Resolves: #1960596GaKRay Strode <rstrode@redhat.com> - 2.56.1-8_@- Backport patch to fix leak in g_signal_connect_object
Resolves: 1887862
Related: #1717000FaKRay Strode <rstrode@redhat.com> - 2.56.1-8_@- Backport patch to fix leak in g_signal_connect_object
Resolves: 1887862
Related: #1717000 EuEMichael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^2- Backport patch to limit access to files when copying (CVE-2019-12450)
Resolves: #1722099oDiyJens Petersen <petersen@redhat.com> - 2.56.1-6^@- Backport patches for GDBus auth
Resolves: #1777221
e r+V: e D5
d2c498e78241cc2d36124d37d4771f877da25de95d6a31c1ad42e1287fdda746D4
136c98f13aca8088f8a6db32a4f1c09e88ab4e875a90611b2c854ca63a7db95aD3
7b99cae552eb8e3aa9044c06a0c67601794c80300cf140324bc228da9d9f0c30D2
d7000378e73195f460b1df7dafb97183eefb63440b39636075973f460f0b141dD1
c67a99f8d73138551a0d40218c32828b28c8df46641ed69f149aa858bfb4476cD0
d0c3a21a7ae050cc88bb11365edee8ae76ce4656de55be60d371d691353d0a2aD/
a09b59d166ae4f96e35aa50238b29f47cbf2e30ed154a83dd200b7627918a160D.
b2b420ac2c03b3a2e4cadd073857498446180ec51a863fe30335c9da3a963fdeD-
ee561a3f0dd8945edec3478e8426cc324bdf6fc5fe6a31d762cfae60d3e14830D,
d41ecaf1cea900f2c9354fc197197c80a88316766208fa264735e4153be0668eD+
c7dec18b5dff68e91dd42275e011d20aecbe60817c948f50fef7adfc8276ec34D*
1f62ae8c12fed4f7639f910b2b5ff758d169ec26fdf5536df0cfd5d6bee2d247D)
bbce7868f8e66ee5f69db6702fdb909d81b8c17bb4f7417dbf08a87ef2a26308
\ UQ \ Qi/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)cPiaFlorian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)hOu_Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`@- Fix CVE-2021-27219
Resolves: #1960596NaKRay Strode <rstrode@redhat.com> - 2.56.1-8_@- Backport patch to fix leak in g_signal_connect_object
Resolves: 1887862
Related: #1717000MaKRay Strode <rstrode@redhat.com> - 2.56.1-8_@- Backport patch to fix leak in g_signal_connect_object
Resolves: 1887862
Related: #1717000 LuEMichael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^2- Backport patch to limit access to files when copying (CVE-2019-12450)
Resolves: #1722099oKiyJens Petersen <petersen@redhat.com> - 2.56.1-6^@- Backport patches for GDBus auth
Resolves: #1777221
O ~} O /XiwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xWi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) ViCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zUi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hTikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)SiOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)uRiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325)
y z_i
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h^ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)]iOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)u\iFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325) [i/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)cZiaFlorian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)xYi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)
- |ND - fiOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)ueiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325) di/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)xci Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/biwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xai Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) `iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)
f fms]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xli Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/kiwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xji Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) iiCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zhi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hgikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)
s qZr s xti Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) siCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zri
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hqikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)piOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)uoiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325) ni/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)
j MiR j z{i
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hzikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)yiOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)uxiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325)fws]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xvi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/uiwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)
d |Nj d uiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325)
s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/~iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)x}i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) |iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)
L ayz L x i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)iOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)
j xi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h
ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816) iOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)
s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f
s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)
Mi" hikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)iOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)5iFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)fs]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)
_ V _
s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)
G5
$s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f#s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x"i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/!iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)x i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380)5 iFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
j GC j U(m?Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0@- nscd: Do not use sendfile for the netgroup cache
- nscd: Use-after-free in netgroup cache
- CVE-2021-27645: nscd: double-free in netgroup cache
- CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263)
- CVE-2024-33600: nscd: null pointer dereferences in netgroup cache
- CVE-2024-33601: nscd: crash on out-of-memory condition
- CVE-2024-33602: nscd: memory corruption with NSS netgroup modules'm=Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i&WDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)5%iFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
2 ]y 2 5/iFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
.s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f-s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x,i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/+iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)x*i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380)r)m{Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3@- nscd: Fix timeout type in netgroup cache (RHEL-34263)
3 # 3 x4i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380)r3m{Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3@- nscd: Fix timeout type in netgroup cache (RHEL-34263)U2m?Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0@- nscd: Do not use sendfile for the netgroup cache
- nscd: Use-after-free in netgroup cache
- CVE-2021-27645: nscd: double-free in netgroup cache
- CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263)
- CVE-2024-33600: nscd: null pointer dereferences in netgroup cache
- CVE-2024-33601: nscd: crash on out-of-memory condition
- CVE-2024-33602: nscd: memory corruption with NSS netgroup modules1m=Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i0WDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)
Mi" ;m=Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i:WDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)59iFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
8s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f7s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x6i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/5iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)
F 'G F @iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z?i
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h>ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)r=m{Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3@- nscd: Fix timeout type in netgroup cache (RHEL-34263)U<m?Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0@- nscd: Do not use sendfile for the netgroup cache
- nscd: Use-after-free in netgroup cache
- CVE-2021-27645: nscd: double-free in netgroup cache
- CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263)
- CVE-2024-33600: nscd: null pointer dereferences in netgroup cache
- CVE-2024-33601: nscd: crash on out-of-memory condition
- CVE-2024-33602: nscd: memory corruption with NSS netgroup modules
e r+V: e DB
ff4671dfa3a8f95a13b8ba51b2a558742445e61b30cbb1cf07788364ca2bb076DA
aab72ef4b89bc4481b87f7aaf225cbdefb62073dddddc7fc7c2b94ab11a0a936D@
acbb0c34227bd9c7bba35cfa08b4942dd141ee4ccadd128d8acedaef5e31522cD?
1cdd1bc2cbd53aa25851e70a8024e7e85db9b9d0fcdfcc2df323c89e5944ec7aD>
43b68e9aee5969d0a7628cb49b8b9e8a4b328432cd2bbf3a542567a7d9be9cc8D=
aba75d84977de2cd5e9da00e763912c5e72ba28b55b17e081014e97ca13ce809D<
9d6c8bed9c4d8626f8fd6586301ec93617410de9408cd2b65fef37c2cea142c9D;
f48caf62db65a846a2e5bf134e7e6a5aa0bcc81a67c9995255a33f3f18ab9f65D:
0fbc642e2648e77838d136eb26008e221d165a8465fd50b51c8e7ef52d5c3376D9
f48d75115ac638576d608849a173ace6a70c2430a2e0226487652befdf004b27D8
c59d4299cbd7dc796fc38b8ac3ad9e4a8030d20ee8831940a24af8b28a84cca5D7
58dd6ecca9f9c38c402d46c56efacaf2a8739de21c64f22dfb3f9887f2de6c94D6
7b92de985a23ef4b67bd11135a92917ca99025920b1e4db59517205a2278c3f1
; W` ; iGWDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)5FiFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
Es#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)fDs]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xCi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/BiwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xAi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380)
f fNs]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xMi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/LiwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xKi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) JiCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zIi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hHikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)
A rMX A UiOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)uTiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325) Si/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)cRiaFlorian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)iQWDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)5PiFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
Os#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)
\ f \ \i/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)x[i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/ZiwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xYi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) XiCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zWi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hVikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)
O ~} O /ciwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xbi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) aiCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z`i
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h_ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)^iOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)u]iFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325)
xki Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) jiCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zii
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hhikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)giOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)ufiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325)fes]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xdi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)
T Mi< T zri
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hqikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)piOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)
os#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)fns]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xmi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/liwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)
# |Nj # 5yiFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
xs#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)fws]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xvi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/uiwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xti Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) siCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)
; W` ; i WDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)5iFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
~s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f}s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x|i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/{iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xzi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380)
2 h 2 zi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)rm{Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3@- nscd: Fix timeout type in netgroup cache (RHEL-34263)Um?Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0@- nscd: Do not use sendfile for the netgroup cache
- nscd: Use-after-free in netgroup cache
- CVE-2021-27645: nscd: double-free in netgroup cache
- CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263)
- CVE-2024-33600: nscd: null pointer dereferences in netgroup cache
- CVE-2024-33601: nscd: crash on out-of-memory condition
- CVE-2024-33602: nscd: memory corruption with NSS netgroup modulesm=Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)
# |Nj # 5 iFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f
s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)
.' iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)iOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)uiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325) i/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)ciaFlorian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)i
WDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)
K Wb K iOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)uiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325) i/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)ciaFlorian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)xi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380)
\ f \ "i/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)x!i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/ iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)x i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z i
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)
O ~} O /)iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)x(i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) 'iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z&i
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h%ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)$iOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)u#iFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325)
v z0i
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h/ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816).iOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)u-iFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325) ,i/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)f+s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x*i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)
S |Nj S 7iOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)u6iFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325)f5s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x4i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/3iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)x2i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) 1iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)
f f>s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x=i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/<iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)x;i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) :iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z9i
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h8ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)
t r[s t xEi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) DiCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zCi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hBikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)AiOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)u@iFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325)
?s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)
e r+V: e DO
cffd614b0edc8b160d92daa7f3c4c4dffd5e33a66532c35ee32132d1b56e63b7DN
91de6d1a2c900bf6a030d637e635ba8bed416176970159ef63c61ba70f93a275DM
b3e7d51cd260028cee1b21b2d94a9e4694745e0e673f10a05aebb54a5a4928abDL
c4697b0258943ed3a070f75ed2b1163ddeb2746108163a6b372318bfc419db74DK
9ba71fe357dd09d1913b30b0bd83507588d8cb06eda6f2c15326f3f1384c6180DJ
b05ac36a6c2c5fb2a3b34dee8aff347281f1ee28b49846b4add728a5cd69f06aDI
68765f29d06d31652e80d398846d899e7437a836c1fffeb61248afa76e51b90fDH
178ac00cbf99e924ca4b26e5bede47496404e34c1fe48906789d80dd955c9793DG
9c54883a611d1da210a5b0909cd7fd415b6c99473614fab81bae9df9cf8c6be2DF
15c7b778a896d0c127b0468d18a519b750dbd5a649ccba7fbb6b5b215b7243d6DE
a25ea7a2e7fdf9c96aa665fd1d337fa501a8be996a208eede238af6018d94012DD
7ea4c424cb331a1de27539fd790be4a991e6525f0d33035d854f2e66e0c2e274DC
235d7a11f2bec5ce59b3207ad420c1a0034747f77ac4902d343951c7bd4109d6
T Mi< T zLi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hKikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)JiOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)
Is#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)fHs]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xGi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/FiwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)
# |Nj # 5SiFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
Rs#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)fQs]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xPi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/OiwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xNi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) MiCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)
L ayz L xZi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/YiwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xXi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) WiCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zVi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hUikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)TiOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)
> P" > fas]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x`i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/_iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)x^i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380)5]iFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
\s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f[s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)
rM em=Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)idWDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)5ciFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
bs#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)
'7 /iiwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xhi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380)rgm{Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3@- nscd: Fix timeout type in netgroup cache (RHEL-34263)Ufm?Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0@- nscd: Do not use sendfile for the netgroup cache
- nscd: Use-after-free in netgroup cache
- CVE-2021-27645: nscd: double-free in netgroup cache
- CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263)
- CVE-2024-33600: nscd: null pointer dereferences in netgroup cache
- CVE-2024-33601: nscd: crash on out-of-memory condition
- CVE-2024-33602: nscd: memory corruption with NSS netgroup modules
i om=Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)inWDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)5miFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
ls#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)fks]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xji Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)
F 'G F tiCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zsi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hrikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)rqm{Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3@- nscd: Fix timeout type in netgroup cache (RHEL-34263)Upm?Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0@- nscd: Do not use sendfile for the netgroup cache
- nscd: Use-after-free in netgroup cache
- CVE-2021-27645: nscd: double-free in netgroup cache
- CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263)
- CVE-2024-33600: nscd: null pointer dereferences in netgroup cache
- CVE-2024-33601: nscd: crash on out-of-memory condition
- CVE-2024-33602: nscd: memory corruption with NSS netgroup modules
; W` ; i{WDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)5ziFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
ys#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)fxs]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xwi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/viwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xui Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380)
f fs]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/ iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) ~iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z}i
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h|ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)
A rMX A iOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)uiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325) i/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)ciaFlorian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)iWDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)5iFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)
\ f \ i/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)xi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)x
i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z i
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h
ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)
O ~} O /iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)iOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)uiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325)
x i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z i
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)iOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)uiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325)fs]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)
T Mi< T z&i
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h%ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)$iOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)
#s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f"s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x!i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/ iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)
# |Nj # 5-iFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
,s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f+s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x*i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/)iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)x(i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) 'iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)
; W` ; i4WDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)53iFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
2s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f1s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x0i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)//iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)x.i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380)
2 h 2 z9i
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h8ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)r7m{Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3@- nscd: Fix timeout type in netgroup cache (RHEL-34263)U6m?Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0@- nscd: Do not use sendfile for the netgroup cache
- nscd: Use-after-free in netgroup cache
- CVE-2021-27645: nscd: double-free in netgroup cache
- CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263)
- CVE-2024-33600: nscd: null pointer dereferences in netgroup cache
- CVE-2024-33601: nscd: crash on out-of-memory condition
- CVE-2024-33602: nscd: memory corruption with NSS netgroup modules5m=Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)
# |Nj # 5@iFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
?s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f>s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x=i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/<iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)x;i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) :iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)
.' HiCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zGi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hFikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)EiOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)uDiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325) Ci/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)cBiaFlorian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)iAWDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)
e r+V: e D\
deefbf7dc62157f10bf35bfcceae5fb497403a6fbf86fef1e8cfd5636f7bad10D[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 Wb K OiOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)uNiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325) Mi/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)cLiaFlorian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)xKi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/JiwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xIi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380)
\ f \ Vi/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)xUi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/TiwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xSi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) RiCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zQi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hPikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)
O ~} O /]iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)x\i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) [iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zZi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hYikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)XiOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)uWiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325)
v zdi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hcikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)biOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)uaiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325) `i/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)f_s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x^i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)
S |Nj S kiOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)ujiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325)fis]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xhi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/giwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xfi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) eiCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)
f frs]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xqi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/piwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xoi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) niCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zmi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hlikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)
t r[s t xyi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) xiCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zwi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hvikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)uiOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)utiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325)
ss#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)
T Mi< T z i
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)~iOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)
}s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f|s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x{i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/ziwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)
# |Nj # 5iFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)fs]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)
L ayz L xi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/
iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)x i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z
i
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)iOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)
> P" > fs]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380)5iFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)fs]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)
rM m=Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)iWDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)5iFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)
'7 / iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)x i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380)rm{Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3@- nscd: Fix timeout type in netgroup cache (RHEL-34263)Um?Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0@- nscd: Do not use sendfile for the netgroup cache
- nscd: Use-after-free in netgroup cache
- CVE-2021-27645: nscd: double-free in netgroup cache
- CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263)
- CVE-2024-33600: nscd: null pointer dereferences in netgroup cache
- CVE-2024-33601: nscd: crash on out-of-memory condition
- CVE-2024-33602: nscd: memory corruption with NSS netgroup modules
i #m=Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i"WDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)5!iFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)
F 'G F (iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z'i
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h&ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)r%m{Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3@- nscd: Fix timeout type in netgroup cache (RHEL-34263)U$m?Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0@- nscd: Do not use sendfile for the netgroup cache
- nscd: Use-after-free in netgroup cache
- CVE-2021-27645: nscd: double-free in netgroup cache
- CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263)
- CVE-2024-33600: nscd: null pointer dereferences in netgroup cache
- CVE-2024-33601: nscd: crash on out-of-memory condition
- CVE-2024-33602: nscd: memory corruption with NSS netgroup modules
; W` ; i/WDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)5.iFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
-s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f,s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x+i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/*iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)x)i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380)
f f6s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x5i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/4iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)x3i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) 2iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z1i
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h0ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)
A rMX A =iOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)u<iFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325) ;i/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)c:iaFlorian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)i9WDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)58iFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
7s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)
\ f \ Di/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)xCi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/BiwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xAi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) @iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z?i
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h>ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)
e r+V: e Di
5c3a51f2cd800bc1eb63007add93f02cb14e4acbe93b537fa3fb5d1a05f91ceaDh
9ff292253bb056d6533811af24502ff8e6b9f03d370e153698aff7cc1cb568b6Dg
794055514a0043fb0a97d85b7e623b6862a4861b6e488835385596d392b4f24eDf
a9cdf7b1790648907c553d9bd3ea79400a2884d68c1cb870f1c3d0c0ef2af44dDe
63e5114d5fdf7fa2162781d184e8588d2af92fd268bf72cf0824edd0ad85d504Dd
83e83351bd9f8e17bb928673f2236a6035cf3a335789585a60a5d5068c2c8b23Dc
68fdae357028fe930922530fba8f0491b1f04b11e6ce8cc9f6c7b362bfe37101Db
bffa643f42fbf585a2b14d6c8bfb9d7ac804826cf20ad4d14bbdc3c996290615Da
b8969d6cee16b77e095cb73262e74f3bea7aeaacc386fb96ed8274c2732c2893D`
71b7e0dd87fd725a96f1b8e998c7b16f7c063cf2f5888312df9191de086378b7D_
4c33dc16f8bf9f19d59d71c209205c27c9923c2016d5ca5f3409885c95bd8be4D^
ae5b869408794a434481ba8d5927690a56b9e2045b44efc1cca5b637285e435cD]
cafdbebcda7664e47d81f647d715249983cbe0bb4b063c1d56ab327a8766e2d0
O ~} O /KiwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xJi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) IiCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zHi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hGikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)FiOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)uEiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325)
xSi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) RiCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)zQi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hPikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)OiOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)uNiFlorian Weimer <fweimer@redhat.com> - 2.17-315^1s- argp: Do not override GCC keywords with macros (#1763325)fMs]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xLi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)
T Mi< T zZi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hYikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)XiOCarlos O'Donell <carlos@redhat.com> - 2.17-316^2@- Adjust security hardening changes for 64-bit POWER BE due to
toolchain limitations (#1793853)
Ws#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)fVs]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xUi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/TiwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)
# |Nj # 5aiFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
`s#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f_s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x^i Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/]iwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)x\i Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) [iCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)
; W` ; ihWDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)5giFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
fs#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)fes]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xdi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/ciwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xbi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380)
2 h 2 zmi
Carlos O'Donell <carlos@redhat.com> - 2.17-318_T- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)hlikFlorian Weimer <fweimer@redhat.com> - 2.17-317^- Do not clobber errno in nss_compat (#1834816)rkm{Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3@- nscd: Fix timeout type in netgroup cache (RHEL-34263)Ujm?Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0@- nscd: Do not use sendfile for the netgroup cache
- nscd: Use-after-free in netgroup cache
- CVE-2021-27645: nscd: double-free in netgroup cache
- CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263)
- CVE-2024-33600: nscd: null pointer dereferences in netgroup cache
- CVE-2024-33601: nscd: crash on out-of-memory condition
- CVE-2024-33602: nscd: memory corruption with NSS netgroup modulesim=Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)
# |Nj # 5tiFlorian Weimer <fweimer@redhat.com> - 2.17-325a G- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
conversion in strcasecmp, strncasecmp (#1993930)
ss#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]- Move __isnanl_pseudo into its own file and link only into libc (#1927536)frs]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)xqi Carlos O'Donell <carlos@redhat.com> - 2.17-322_A- Enable file-based IFUNC selection on NVMe devices (#1883162)/piwCarlos O'Donell <carlos@redhat.com> - 2.17-321_@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1812119)xoi Carlos O'Donell <carlos@redhat.com> - 2.17-320_T- CVE-2020-29573: Harden printf family of functions (#1869380) niCarlos O'Donell <carlos@redhat.com> - 2.17-319_T- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)
;0I b~ ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/@- fixes bugs bz#1930561`};Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_G@- fixes bugs bz#1286171`|;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_- fixes bugs bz#1895301v{gGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_@- fixes bugs bz#1286171 bz#1821743 bz#1837926kzQGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_"- fixes bugs bz#1873469 bz#1881823Vyu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X- fixes bugs bz#1785714Vxu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P- fixes bugs bz#1460657Vwu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P- fixes bugs bz#1460657Vvu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O@- fixes bugs bz#1785714iuWDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)
D 4l D `;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`- fixes bugs bz#1945143\1Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`[- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462
bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018
bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467
bz#1945143 bz#1946171 bz#1957191 bz#1957641b ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`@- fixes bugs bz#1953901b ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`e@- fixes bugs bz#1927235`;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v@- fixes bugs bz#1948547` ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T@- fixes bugs bz#1939372fyWCentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P- remove vendor and/or packager lines
+ dK + kQGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_"- fixes bugs bz#1873469 bz#1881823V
u;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X- fixes bugs bz#1785714V u;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P- fixes bugs bz#1460657V u;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P- fixes bugs bz#1460657V
u;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O@- fixes bugs bz#1785714d uWCentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a- fixes bugs bz#1973566R Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665
bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205`;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`E- fixes bugs bz#1689375
c $\- c b ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`@- fixes bugs bz#1953901b ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`e@- fixes bugs bz#1927235`;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v@- fixes bugs bz#1948547`;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T@- fixes bugs bz#1939372fyWCentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P- remove vendor and/or packager linesb ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/@- fixes bugs bz#1930561`;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_G@- fixes bugs bz#1286171`;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_- fixes bugs bz#1895301vgGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_@- fixes bugs bz#1286171 bz#1821743 bz#1837926
: = : d uWCentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines` ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a- fixes bugs bz#1973566R Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665
bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205`;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`E- fixes bugs bz#1689375`;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`- fixes bugs bz#1945143\1Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`[- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462
bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018
bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467
bz#1945143 bz#1946171 bz#1957191 bz#1957641
! N.R ! f'yWCentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P- remove vendor and/or packager linesb& ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/@- fixes bugs bz#1930561`%;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_G@- fixes bugs bz#1286171`$;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_- fixes bugs bz#1895301v#gGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_@- fixes bugs bz#1286171 bz#1821743 bz#1837926k"QGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_"- fixes bugs bz#1873469 bz#1881823V!u;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X- fixes bugs bz#1785714V u;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P- fixes bugs bz#1460657V u;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P- fixes bugs bz#1460657V u;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O@- fixes bugs bz#1785714
J :p J `.;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`E- fixes bugs bz#1689375`-;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`- fixes bugs bz#1945143\,1Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`[- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462
bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018
bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467
bz#1945143 bz#1946171 bz#1957191 bz#1957641b+ ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`@- fixes bugs bz#1953901b* ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`e@- fixes bugs bz#1927235`);Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v@- fixes bugs bz#1948547`(;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T@- fixes bugs bz#1939372
*`U k6QGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_"- fixes bugs bz#1873469 bz#1881823V5u;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X- fixes bugs bz#1785714V4u;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P- fixes bugs bz#1460657V3u;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P- fixes bugs bz#1460657V2u;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O@- fixes bugs bz#1785714d1uWCentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`0;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a- fixes bugs bz#1973566R/ Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665
bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205
c $\- c b? ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`@- fixes bugs bz#1953901b> ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`e@- fixes bugs bz#1927235`=;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v@- fixes bugs bz#1948547`<;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T@- fixes bugs bz#1939372f;yWCentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P- remove vendor and/or packager linesb: ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/@- fixes bugs bz#1930561`9;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_G@- fixes bugs bz#1286171`8;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_- fixes bugs bz#1895301v7gGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_@- fixes bugs bz#1286171 bz#1821743 bz#1837926
: = : dEuWCentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`D;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a- fixes bugs bz#1973566RC Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665
bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205`B;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`E- fixes bugs bz#1689375`A;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`- fixes bugs bz#1945143\@1Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`[- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462
bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018
bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467
bz#1945143 bz#1946171 bz#1957191 bz#1957641
e r+V: e Dv
72811299e34ce97ab4abb454b8e728ca0bcc192a314cab3cc6799df21cc7b92bDu
c40a3a99e0047693ac6789e2c35f28639c6c6c3dafcaa8083ab1f6aec4279cd6Dt
aa8159ebe427848a84e44ec1263eb6e8467bd09994185803163c9501ede167adDs
dd928d632917d65ac27ed05d45f342a550ac01430159ae99363d9a406701fe04Dr
276df6b2e20398eb1acd7d2327f480491884ec450b49410d4cad1f010cba2e36Dq
ea5bee404d5fc3e07b6c6c946b4663fdc9b4befd89d89e5fd0c57da7b27800ecDp
b843af350666656b6246dd355d5e90fac356a7c6b609118d69957fefcf9350b3Do
a100ffb8d2d8478959b6d515f8a57612af98cd23cd3f340be8fdc45b223ebd2bDn
b83531fbbb21a612cb6bf9dd29ef1ba3afdeacd82de1d86b9949dac00d9edecbDm
b808a968c2ce3fd33503aecac4b0f640badeb9c4fc64b22515676fc26677bdbaDl
18f14d208b245267c6cc29b0b7074e0e030ee89e895659c26047d4186135bd94Dk
6c06e0b4e7b36d4a64097557ada558aaa42f90b60af6f66d06329756c6ea57c9Dj
b126c7678a3e74f9a0dca6136f61a6fdd9471991c6ce22a72c08d8a8aa86f2e1
! N.R ! fOyWCentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P- remove vendor and/or packager linesbN ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/@- fixes bugs bz#1930561`M;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_G@- fixes bugs bz#1286171`L;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_- fixes bugs bz#1895301vKgGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_@- fixes bugs bz#1286171 bz#1821743 bz#1837926kJQGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_"- fixes bugs bz#1873469 bz#1881823VIu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X- fixes bugs bz#1785714VHu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P- fixes bugs bz#1460657VGu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P- fixes bugs bz#1460657VFu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O@- fixes bugs bz#1785714
J :p J `V;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`E- fixes bugs bz#1689375`U;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`- fixes bugs bz#1945143\T1Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`[- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462
bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018
bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467
bz#1945143 bz#1946171 bz#1957191 bz#1957641bS ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`@- fixes bugs bz#1953901bR ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`e@- fixes bugs bz#1927235`Q;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v@- fixes bugs bz#1948547`P;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T@- fixes bugs bz#1939372
*`U k^QGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_"- fixes bugs bz#1873469 bz#1881823V]u;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X- fixes bugs bz#1785714V\u;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P- fixes bugs bz#1460657V[u;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P- fixes bugs bz#1460657VZu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O@- fixes bugs bz#1785714dYuWCentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`X;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a- fixes bugs bz#1973566RW Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665
bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205
c $\- c bg ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`@- fixes bugs bz#1953901bf ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`e@- fixes bugs bz#1927235`e;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v@- fixes bugs bz#1948547`d;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T@- fixes bugs bz#1939372fcyWCentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P- remove vendor and/or packager linesbb ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/@- fixes bugs bz#1930561`a;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_G@- fixes bugs bz#1286171``;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_- fixes bugs bz#1895301v_gGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_@- fixes bugs bz#1286171 bz#1821743 bz#1837926
: = : dmuWCentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`l;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a- fixes bugs bz#1973566Rk Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665
bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205`j;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`E- fixes bugs bz#1689375`i;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`- fixes bugs bz#1945143\h1Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`[- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462
bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018
bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467
bz#1945143 bz#1946171 bz#1957191 bz#1957641
! N.R ! fwyWCentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P- remove vendor and/or packager linesbv ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/@- fixes bugs bz#1930561`u;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_G@- fixes bugs bz#1286171`t;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_- fixes bugs bz#1895301vsgGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_@- fixes bugs bz#1286171 bz#1821743 bz#1837926krQGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_"- fixes bugs bz#1873469 bz#1881823Vqu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X- fixes bugs bz#1785714Vpu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P- fixes bugs bz#1460657Vou;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P- fixes bugs bz#1460657Vnu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O@- fixes bugs bz#1785714 of
6flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| 4 9 @ H O V ] d k r y # ( / 6 = D K S Z a h m t ~ ' . 6 ? E O V ^ g m w ~ & . 7 = C I O W
_
e
l
s
x
'
-
5
=
E
M
S
Y
`
f
m
t
z
"
)
0
!6
"=
#D
$J
%Q
'X
(^
)e
*l
+r
,y
-
.
/
0
1
2!
3(
4.
55
J :p J `~;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`E- fixes bugs bz#1689375`};Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`- fixes bugs bz#1945143\|1Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`[- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462
bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018
bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467
bz#1945143 bz#1946171 bz#1957191 bz#1957641b{ ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`@- fixes bugs bz#1953901bz ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`e@- fixes bugs bz#1927235`y;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v@- fixes bugs bz#1948547`x;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T@- fixes bugs bz#1939372
*`U kQGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_"- fixes bugs bz#1873469 bz#1881823Vu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X- fixes bugs bz#1785714Vu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P- fixes bugs bz#1460657Vu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P- fixes bugs bz#1460657Vu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O@- fixes bugs bz#1785714duWCentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines` ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a- fixes bugs bz#1973566R Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665
bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205
c $\- c b ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`@- fixes bugs bz#1953901b ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`e@- fixes bugs bz#1927235`
;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v@- fixes bugs bz#1948547` ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T@- fixes bugs bz#1939372f yWCentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P- remove vendor and/or packager linesb
;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/@- fixes bugs bz#1930561` ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_G@- fixes bugs bz#1286171`;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_- fixes bugs bz#1895301vgGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_@- fixes bugs bz#1286171 bz#1821743 bz#1837926
: = : duWCentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a- fixes bugs bz#1973566R Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665
bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205`;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`E- fixes bugs bz#1689375`;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`- fixes bugs bz#1945143\1Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`[- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462
bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018
bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467
bz#1945143 bz#1946171 bz#1957191 bz#1957641
! N.R ! f yWCentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P- remove vendor and/or packager linesb ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/@- fixes bugs bz#1930561` ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_G@- fixes bugs bz#1286171` ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_- fixes bugs bz#1895301vgGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_@- fixes bugs bz#1286171 bz#1821743 bz#1837926kQGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_"- fixes bugs bz#1873469 bz#1881823Vu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X- fixes bugs bz#1785714Vu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P- fixes bugs bz#1460657Vu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P- fixes bugs bz#1460657Vu;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O@- fixes bugs bz#1785714
J :p J `&;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`E- fixes bugs bz#1689375`%;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`- fixes bugs bz#1945143\$1Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`[- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462
bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018
bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467
bz#1945143 bz#1946171 bz#1957191 bz#1957641b# ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`@- fixes bugs bz#1953901b" ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`e@- fixes bugs bz#1927235`!;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v@- fixes bugs bz#1948547` ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T@- fixes bugs bz#1939372
*`U k.QGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_"- fixes bugs bz#1873469 bz#1881823V-u;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X- fixes bugs bz#1785714V,u;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P- fixes bugs bz#1460657V+u;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P- fixes bugs bz#1460657V*u;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O@- fixes bugs bz#1785714d)uWCentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`(;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a- fixes bugs bz#1973566R' Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665
bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205
c $\- c b7 ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`@- fixes bugs bz#1953901b6 ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`e@- fixes bugs bz#1927235`5;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v@- fixes bugs bz#1948547`4;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T@- fixes bugs bz#1939372f3yWCentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P- remove vendor and/or packager linesb2 ;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/@- fixes bugs bz#1930561`1;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_G@- fixes bugs bz#1286171`0;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_- fixes bugs bz#1895301v/gGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_@- fixes bugs bz#1286171 bz#1821743 bz#1837926
: = : d=uWCentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`<;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a- fixes bugs bz#1973566R; Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665
bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205`:;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`E- fixes bugs bz#1689375`9;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`- fixes bugs bz#1945143\81Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`[- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462
bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018
bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467
bz#1945143 bz#1946171 bz#1957191 bz#1957641
Pji tCsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yBeJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270Ae Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357r@qwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286n?msCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,>qiFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501
j eP j rIqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nHmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417Gs
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371Fs-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624Es-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058DsFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999
e r+V: e D
8afb8e27332a8489152d37ca03c25098d73ea51e0982b87f6a7bb7d35104b927D
6ff94086763de7dbc7a08197fae9ec80ef7dbba995606dc86e245517b4635a11D
68b19039b1e53465dc3f08f0e56e24f7e1672b449a51dd05f8ae10ff49416b66D
86f47f4e0ba937bd5cc3e11936092ae2624f85a10417a53a3620844161158224D
821df7321c6fd01dc77f9435ba556d7b08cfdfdb262113c4223883e34adeedf3D~
195f9b3429ced50e475e3f14ae59ece2ac1f581466cf6713231c9da9927283e0D}
b08dd14ff4c9cde964c7eb832ae4496d321debc822b86b970f8051ca8589c6b3D|
c4456d3a9934c3fe90a0750649cc735745508843da43735b39aa5cdcaadb99a4D{
d6af98392b986204b8b504202adcf13ec1eca355c819f9d4a1ee4d8448a14c55Dz
be7ce57daa28ef35ce7974665112d6551b70b8c48b1c14c9fb067c8aae658533Dy
134432ad69b8ff48c6929ed4f645153058d8cb0020dbb0be3eeb7ead882052b9Dx
838f9c1a4495b9f9bd85ed4019e8c2dc8ac645f72e221541ed03338c1cea45bdDw
e67c1938cd59583e0619d2d7e8c5830ae4585c3509d473ef7f73fac3a559c82f
Z { Z Os-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624Ns-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058MsFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tLsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yKeJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270Je Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
p$ W]'Rui Matos <rmatos@redhat.com> - 3.22.1-4Y- Make our password validation similar to anaconda's
Resolves: rhbz#1447941V]3Rui Matos <rmatos@redhat.com> - 3.22.1-3Y - Disable 'software' page as it doesn't make sense in RHEL
Resolves: rhbz#1446735xU]Rui Matos <rmatos@redhat.com> - 3.22.1-2XC- Honor anaconda's firstboot being disabled
Resolves: rhbz#1226819ITe1Kalev Lember <klember@redhat.com> - 3.22.1-1W%- Update to 3.22.1ISe1Kalev Lember <klember@redhat.com> - 3.22.0-1W@- Update to 3.22.0KRg3Kalev Lember <klember@redhat.com> - 3.21.92-1W@- Update to 3.21.92qQssFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419Ps
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
C v"s C k_ayRay Strode <rstrode@redhat.com> - 3.28.1-4\F@- Fix busy loop in account plugin
Resolves: #1600161^^a_Ray Strode <rstrode@redhat.com> - 3.28.1-2[Y- Fix account schema
Resolves: #1597353^]e[Kalev Lember <klember@redhat.com> - 3.28.1-1ZJ@- Update to 3.28.1
- Resolves: #1568621+\ioBastien Nocera <bnocera@redhat.com> - 3.26.2-9Z$+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171q[ymMichael Catanzaro <mcatanzaro@redhat.com> - 3.28.0-2.1b- Remove timezone boundaries
Related: #2098257zZaRay Strode <rstrode@redhat.com> - 3.28.0-2\F@- Ensure vendora logo gets used instead of foot
Resolves: #1711308`Yi[Richard Hughes <rhughes@redhat.com> - 3.28.0-1[- Update to 3.28.0
- Resolves: #1568175X]1Rui Matos <rmatos@redhat.com> - 3.22.1-5Y@- Update session definition files to work with GNOME 3.26
Resolves: rhbz#1506607
qf ee!Benjamin Berg <bberg@redhat.com> - 3.28.1-10_ @- Prevent automatic logout warning in greeter sessions
Related: #1729296:dcBenjamin Berg <bberg@redhat.com> - 3.28.1-9_- Keep auto-logout working inside VMs
Resolves: #1672998
- Never log out automatically from greeter sessions
Resolves: #1729296 cm'Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas
Resolves: #1548320bm7Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L- Fallback scale properly without org.gnome.Mutter.DisplayConfig
Resolves: #1556776sam}Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J@- Handle rfkill device disappearing
Resolves: #1691197 `m+Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5@- Added patch for - keyboard: Enable ibus for OSK purposes
Resolves: #1632904
Q! lm7Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L- Fallback scale properly without org.gnome.Mutter.DisplayConfig
Resolves: #1556776skm}Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J@- Handle rfkill device disappearing
Resolves: #1691197 jm+Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5@- Added patch for - keyboard: Enable ibus for OSK purposes
Resolves: #1632904kiayRay Strode <rstrode@redhat.com> - 3.28.1-4\F@- Fix busy loop in account plugin
Resolves: #1600161^ha_Ray Strode <rstrode@redhat.com> - 3.28.1-2[Y- Fix account schema
Resolves: #1597353^ge[Kalev Lember <klember@redhat.com> - 3.28.1-1ZJ@- Update to 3.28.1
- Resolves: #1568621+fioBastien Nocera <bnocera@redhat.com> - 3.26.2-9Z$+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171
p s/m p sm+Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5@- Added patch for - keyboard: Enable ibus for OSK purposes
Resolves: #1632904krayRay Strode <rstrode@redhat.com> - 3.28.1-4\F@- Fix busy loop in account plugin
Resolves: #1600161^qa_Ray Strode <rstrode@redhat.com> - 3.28.1-2[Y- Fix account schema
Resolves: #1597353^pe[Kalev Lember <klember@redhat.com> - 3.28.1-1ZJ@- Update to 3.28.1
- Resolves: #1568621oe!Benjamin Berg <bberg@redhat.com> - 3.28.1-10_ @- Prevent automatic logout warning in greeter sessions
Related: #1729296:ncBenjamin Berg <bberg@redhat.com> - 3.28.1-9_- Keep auto-logout working inside VMs
Resolves: #1672998
- Never log out automatically from greeter sessions
Resolves: #1729296 mm'Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas
Resolves: #1548320
$ h$ xe!Benjamin Berg <bberg@redhat.com> - 3.28.1-10_ @- Prevent automatic logout warning in greeter sessions
Related: #1729296:wcBenjamin Berg <bberg@redhat.com> - 3.28.1-9_- Keep auto-logout working inside VMs
Resolves: #1672998
- Never log out automatically from greeter sessions
Resolves: #1729296 vm'Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas
Resolves: #1548320um7Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L- Fallback scale properly without org.gnome.Mutter.DisplayConfig
Resolves: #1556776stm}Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J@- Handle rfkill device disappearing
Resolves: #1691197
" *- " m7Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L- Fallback scale properly without org.gnome.Mutter.DisplayConfig
Resolves: #1556776s~m}Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J@- Handle rfkill device disappearing
Resolves: #1691197 }m+Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5@- Added patch for - keyboard: Enable ibus for OSK purposes
Resolves: #1632904k|ayRay Strode <rstrode@redhat.com> - 3.28.1-4\F@- Fix busy loop in account plugin
Resolves: #1600161^{a_Ray Strode <rstrode@redhat.com> - 3.28.1-2[Y- Fix account schema
Resolves: #1597353^ze[Kalev Lember <klember@redhat.com> - 3.28.1-1ZJ@- Update to 3.28.1
- Resolves: #1568621yo3Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-11`t- Fix possible crash on gsd-media-keys startup
Resolves: #1878167
- Ignore permission issues during gsd-housekeeping file deletion
Resolves: #1909954
- Revert mapping of "XF86RFKill" key
Resolves: #1888412
l s/ l +ioBastien Nocera <bnocera@redhat.com> - 3.26.2-9Z$+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171o3Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-11`t- Fix possible crash on gsd-media-keys startup
Resolves: #1878167
- Ignore permission issues during gsd-housekeeping file deletion
Resolves: #1909954
- Revert mapping of "XF86RFKill" key
Resolves: #1888412e!Benjamin Berg <bberg@redhat.com> - 3.28.1-10_ @- Prevent automatic logout warning in greeter sessions
Related: #1729296:cBenjamin Berg <bberg@redhat.com> - 3.28.1-9_- Keep auto-logout working inside VMs
Resolves: #1672998
- Never log out automatically from greeter sessions
Resolves: #1729296 m'Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas
Resolves: #1548320
>A6 m'Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas
Resolves: #1548320
m7Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L- Fallback scale properly without org.gnome.Mutter.DisplayConfig
Resolves: #1556776s m}Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J@- Handle rfkill device disappearing
Resolves: #1691197 m+Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5@- Added patch for - keyboard: Enable ibus for OSK purposes
Resolves: #1632904kayRay Strode <rstrode@redhat.com> - 3.28.1-4\F@- Fix busy loop in account plugin
Resolves: #1600161^a_Ray Strode <rstrode@redhat.com> - 3.28.1-2[Y- Fix account schema
Resolves: #1597353^e[Kalev Lember <klember@redhat.com> - 3.28.1-1ZJ@- Update to 3.28.1
- Resolves: #1568621
N B
K N m+Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5@- Added patch for - keyboard: Enable ibus for OSK purposes
Resolves: #1632904kayRay Strode <rstrode@redhat.com> - 3.28.1-4\F@- Fix busy loop in account plugin
Resolves: #1600161^a_Ray Strode <rstrode@redhat.com> - 3.28.1-2[Y- Fix account schema
Resolves: #1597353^e[Kalev Lember <klember@redhat.com> - 3.28.1-1ZJ@- Update to 3.28.1
- Resolves: #1568621+ioBastien Nocera <bnocera@redhat.com> - 3.26.2-9Z$+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171
e!Benjamin Berg <bberg@redhat.com> - 3.28.1-10_ @- Prevent automatic logout warning in greeter sessions
Related: #1729296: cBenjamin Berg <bberg@redhat.com> - 3.28.1-9_- Keep auto-logout working inside VMs
Resolves: #1672998
- Never log out automatically from greeter sessions
Resolves: #1729296
b h$ b ^a_Ray Strode <rstrode@redhat.com> - 3.28.1-2[Y- Fix account schema
Resolves: #1597353^e[Kalev Lember <klember@redhat.com> - 3.28.1-1ZJ@- Update to 3.28.1
- Resolves: #1568621e!Benjamin Berg <bberg@redhat.com> - 3.28.1-10_ @- Prevent automatic logout warning in greeter sessions
Related: #1729296:cBenjamin Berg <bberg@redhat.com> - 3.28.1-9_- Keep auto-logout working inside VMs
Resolves: #1672998
- Never log out automatically from greeter sessions
Resolves: #1729296 m'Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas
Resolves: #1548320m7Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L- Fallback scale properly without org.gnome.Mutter.DisplayConfig
Resolves: #1556776sm}Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J@- Handle rfkill device disappearing
Resolves: #1691197
' k ' e!Benjamin Berg <bberg@redhat.com> - 3.28.1-10_ @- Prevent automatic logout warning in greeter sessions
Related: #1729296: cBenjamin Berg <bberg@redhat.com> - 3.28.1-9_- Keep auto-logout working inside VMs
Resolves: #1672998
- Never log out automatically from greeter sessions
Resolves: #1729296 m'Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas
Resolves: #1548320 m7Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L- Fallback scale properly without org.gnome.Mutter.DisplayConfig
Resolves: #1556776s m}Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J@- Handle rfkill device disappearing
Resolves: #1691197 m+Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5@- Added patch for - keyboard: Enable ibus for OSK purposes
Resolves: #1632904kayRay Strode <rstrode@redhat.com> - 3.28.1-4\F@- Fix busy loop in account plugin
Resolves: #1600161
" *- " 'm7 Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L- Fallback scale properly without org.gnome.Mutter.DisplayConfig
Resolves: #1556776s&m} Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J@- Handle rfkill device disappearing
Resolves: #1691197 %m+ Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5@- Added patch for - keyboard: Enable ibus for OSK purposes
Resolves: #1632904k$ay Ray Strode <rstrode@redhat.com> - 3.28.1-4\F@- Fix busy loop in account plugin
Resolves: #1600161^#a_ Ray Strode <rstrode@redhat.com> - 3.28.1-2[Y- Fix account schema
Resolves: #1597353^"e[ Kalev Lember <klember@redhat.com> - 3.28.1-1ZJ@- Update to 3.28.1
- Resolves: #1568621!o3Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-11`t- Fix possible crash on gsd-media-keys startup
Resolves: #1878167
- Ignore permission issues during gsd-housekeeping file deletion
Resolves: #1909954
- Revert mapping of "XF86RFKill" key
Resolves: #1888412
s/ q-ssFlorian Müllner <fmuellner@redhat.com> - 3.28.3-24]N@- Fix orphaned animation actors
Related: #1753799 ,c7Ray Strode <rstrode@redhat.coM> - 3.28.3-23]|@- Fix "Not Listed?" entry to shows characters instead of bullets
Resolves: #1772896+o3 Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-11`t- Fix possible crash on gsd-media-keys startup
Resolves: #1878167
- Ignore permission issues during gsd-housekeeping file deletion
Resolves: #1909954
- Revert mapping of "XF86RFKill" key
Resolves: #1888412*e! Benjamin Berg <bberg@redhat.com> - 3.28.1-10_ @- Prevent automatic logout warning in greeter sessions
Related: #1729296:)c Benjamin Berg <bberg@redhat.com> - 3.28.1-9_- Keep auto-logout working inside VMs
Resolves: #1672998
- Never log out automatically from greeter sessions
Resolves: #1729296 (m' Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas
Resolves: #1548320
X X X5cQRay Strode <rstrode@redhat.com> - 3.28.3-32_#- Fix crasher
Resolves: #1897063[4cWRay Strode <rstrode@redhat.com> - 3.28.3-31_@- Add leak fixes
Resolves: #1881995 3s%Florian Müllner <fmuellner@redhat.com> - 3.28.3-30^)@- Wake up lock screen when deactivated programmatically
Resolves: #1850201k2sgFlorian Müllner <fmuellner@redhat.com> - 3.28.3-29^@- Squash more JS warnings
Related: #17511211sFlorian Müllner <fmuellner@redhat.com> - 3.28.3-28^@- Fix some (harmless but annoying) JS warnings
Related: #1751121|0sFlorian Müllner <fmuellner@redhat.com> - 3.28.3-27^V@- Avoid warning on early signal emission
Resolves: #1735700u/s{Florian Müllner <fmuellner@redhat.com> - 3.28.3-26^1- Fix IM set-content-type handling
Resolves: #1771841s.swFlorian Müllner <fmuellner@redhat.com> - 3.28.3-25^@- Improve performance under load
Resolves: #1824871
? , ? [=cWRay Strode <rstrode@redhat.com> - 3.28.3-31_@- Add leak fixes
Resolves: #1881995 <s%Florian Müllner <fmuellner@redhat.com> - 3.28.3-30^)@- Wake up lock screen when deactivated programmatically
Resolves: #1850201k;sgFlorian Müllner <fmuellner@redhat.com> - 3.28.3-29^@- Squash more JS warnings
Related: #1751121:sFlorian Müllner <fmuellner@redhat.com> - 3.28.3-28^@- Fix some (harmless but annoying) JS warnings
Related: #1751121|9sFlorian Müllner <fmuellner@redhat.com> - 3.28.3-27^V@- Avoid warning on early signal emission
Resolves: #1735700u8s{Florian Müllner <fmuellner@redhat.com> - 3.28.3-26^1- Fix IM set-content-type handling
Resolves: #1771841s7swFlorian Müllner <fmuellner@redhat.com> - 3.28.3-25^@- Improve performance under load
Resolves: #1824871q6ssFlorian Müllner <fmuellner@redhat.com> - 3.28.3-24]N@- Fix orphaned animation actors
Related: #1753799
B 1C? B Es%Florian Müllner <fmuellner@redhat.com> - 3.28.3-30^)@- Wake up lock screen when deactivated programmatically
Resolves: #1850201kDsgFlorian Müllner <fmuellner@redhat.com> - 3.28.3-29^@- Squash more JS warnings
Related: #1751121CsFlorian Müllner <fmuellner@redhat.com> - 3.28.3-28^@- Fix some (harmless but annoying) JS warnings
Related: #1751121|BsFlorian Müllner <fmuellner@redhat.com> - 3.28.3-27^V@- Avoid warning on early signal emission
Resolves: #1735700uAs{Florian Müllner <fmuellner@redhat.com> - 3.28.3-26^1- Fix IM set-content-type handling
Resolves: #1771841s@swFlorian Müllner <fmuellner@redhat.com> - 3.28.3-25^@- Improve performance under load
Resolves: #1824871q?ssFlorian Müllner <fmuellner@redhat.com> - 3.28.3-33` l- Guard against StWidget crash
Resolves: #1861428X>cQRay Strode <rstrode@redhat.com> - 3.28.3-32_#- Fix crasher
Resolves: #1897063
J GeD J Me Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357rLqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nKmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,JqiFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501kIsgFlorian Müllner <fmuellner@redhat.com> - 3.29.3-34`- Fix another JS warning
Resolves: #1860445qHssFlorian Müllner <fmuellner@redhat.com> - 3.28.3-33` l- Guard against StWidget crash
Resolves: #1861428XGcQRay Strode <rstrode@redhat.com> - 3.28.3-32_#- Fix crasher
Resolves: #1897063[FcWRay Strode <rstrode@redhat.com> - 3.28.3-31_@- Add leak fixes
Resolves: #1881995
e r+V: e D
e09b5f3555e23622b184571a63391c9f149a33111cf6ec9a07616cecca01c1c3D
996c2919ed070ff29e27f8c9e3ec7f7ce69e1eea9e9da6d559423f84983ba41cD
8d8f18480a50ae9e2993b7bee4e3a0d583f2b6288ec60e32b2b42a5b4256456aD
1afd010d898c09610cd98864d1e601d56fbb031d59f51f0e0e1a08fc482b006fD
9c633fbd6673e42c90f906b0939d7603ab4b721859bff248db9a4cc0489b32a6D
abb8fad659ee9b374da07546268016023d98393401191ae5ac9ac40748aad0edD
d3f83e6ec632331c1a4225feeaaf7c261512e7eb7a079d16b971c7c027fa3c0bD
90b70e89b675963abcce8494de690686f885b273dc190de89560db7345231837D
d8e476878a37bbc6056f5f2cfa3f1c9b9406ca06fd0c7ba1bb6e17b09a385ae9D
8d5c171c9ce6a333fe8241291edf73b4b6bbed0df2258efac8cfac13210aba97D
b06ece51d62eb4905a59da18d4a041ada4dc1d9541693245f60fa02f0ec302deD
30eb275b4ea0c87a84abafbe22dd3006c16cac9a0fa0c57de243a23c72d28adfD
db4ef1e0a6b2f44fef3fdb8ad686016dcfa25ae6374a3646a9c898f01668d499
]
r ] Ss
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371Rs-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624Qs-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058PsFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tOsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yNeJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270
YsFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tXsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yWeJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270Ve Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357rUqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nTmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417
N mX4 N r`qwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286n_msCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,^qiFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501q]ssFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419\s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371[s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624Zs-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z fs-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624es-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058dsFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tcsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102ybeJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270ae Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
msFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tlsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102ykeJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270je Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357riqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nhmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417gs
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
N mX4 N rtqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nsmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,rqiFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501qqssFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419ps
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371os-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624ns-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z zs-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624ys-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058xsFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999twsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yveJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270ue Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
s Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t sy Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102ye Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270~e Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357r}qw Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286n|ms Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417{s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
N mX4 N rqw
Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nms
Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,qi
Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501qss Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371s- Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624s- Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z s-
Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624
s-
Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058 s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t sy
Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102y
e
Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270 e
Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
s Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tsy Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102ye Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270e Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357rqw Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nms Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
N mX4 N r qw Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nms Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,qi Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501qss Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371s- Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624s- Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z "s- Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624!s- Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058 s Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t sy Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102y e Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270 e Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
)s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t(sy
Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102y'e
Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270&e
Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357r%qw
Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286n$ms
Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417#s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
N mX4 N r0qwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286n/msCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,.qiFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501q-ss
Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419,s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371+s-
Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624*s-
Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z 6s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #19016245s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #18480584sFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t3syFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102y2eJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #17782701e Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
=sFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t<syFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102y;eJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270:e Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357r9qwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286n8msCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #17024177s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
N mX4 N rDqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nCmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,BqiFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501qAssFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419@s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371?s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624>s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z Js-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624Is-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058HsFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tGsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yFeJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270Ee Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
QsFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tPsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yOeJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270Ne Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357rMqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nLmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417Ks
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
e r+V: e D
de133553b72273258b6a99609593572620371fffa43173a2338c8558bfa99e7eD
a3f82abae1cfa7453d9b8553062e87caf6acf5fab2d57ec6ba1cd09335b548f8D
44c332e4f12eed26da249463f404e2a9b0a26965d3864059eabafa8b359ad304D
c2dee3fc80a476ec4b0960d8a193508056f424e74141e414c57914a3c8f07e86D
0f15bf4e21cca58586fae47893052796624bb20d948f2087a88fa6589059216aD
86d37b5ad18b07654ecb4a92153db1f1929859e2e00c1a74b0455e6a33a22949D
db707f9fd1fe35154ab4047938dc0ffe4a07327789e176680886a697d796b61eD
bd606511a1c296702ecfd01d1fa8f5651c4c51d34d4f242cd3fe75de4b25c299D
5e7fbcbc653f613c746c3e1bb2b62d8fcc19ac0cf1d92487882d5541de4284c0D
ae2e332cb8ed86d6de74c580f47de47f6f0d33330807f898fad3b7a0b8ffa440D
728ac150acc4c81d235b89af0449b11ae268d8c5ea5df6ca8b54c4f90b3deb7cD
d2cc1f66c9ca4847924aa950f6bf6e884b94331ad97c0150bd241fccb76ae118D
1dcd5933cc511b7268b7c46d30ee331788e825ef5dc6aeefc373ae7708e575f7
N mX4 N rXqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nWmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,VqiFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501qUssFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419Ts
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371Ss-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624Rs-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z ^s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624]s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058\sFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t[syFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yZeJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270Ye Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
esFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tdsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yceJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270be Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357raqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286n`msCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417_s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
N mX4 N rlqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nkmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,jqiFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501qissFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419hs
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371gs-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624fs-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z rs-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624qs-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058psFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tosyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yneJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270me Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
ysFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999txsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yweJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270ve Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357ruqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286ntmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417ss
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
N mX4 N r qwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,~qiFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501q}ssFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419|s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371{s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624zs-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058sFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yeJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270e Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
sFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t syFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102y eJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270
e Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357r qwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
N mX4 N rqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,qiFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501qssFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058sFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yeJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270e Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
!sFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t syFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102y eJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270 e Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357r qwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286n msCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
N mX4 N r(qwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286n'msCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,&qiFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501q%ssFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419$s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371#s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624"s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z .s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624-s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058,sFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t+syFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102y*eJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270)e Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
5sFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t4syFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102y3eJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #17782702e Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357r1qwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286n0msCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417/s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
N mX4 N r<qw Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286n;ms Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,:qi Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501q9ssFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #18754198s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #19043717s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #19016246s-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z Bs- Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624As- Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058@s Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t?sy Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102y>e Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270=e Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
Is Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tHsy Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yGe Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270Fe Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357rEqw Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nDms Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417Cs
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
N mX4 N rPqw Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nOms Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,Nqi Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501qMss Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419Ls
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371Ks- Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624Js- Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
e r+V: e D*
44d06a1ca389cc452e21dee550e31d9247c635c403355f8fa7df144b76f7ee8eD)
d8dd9b50628f10da8aacac180c1d67e558c1ea21f01087d813dcd0249e74edbdD(
b4cbf615b36395073b874a9c133a8bf54fd76e3016b591c08aa9bb4e0bc70679D'
7c3a5727b1fac7e2de0318d8d80ec9c79f8d4817cde856564f2029e02691769fD&
c480e3a1a9b563578db18be5b147c32561044872ed18447819bf430f2cde21c2D%
2a85a789f09834655fede0beff4a30eea8c21356b1669e49795509c63d513254D$
82c766a327f786b1d8e1cf34a5ed50e63b48ed813b1e42b1cdf8bdbe7d349866D#
f37f01eec61a287a1271577470666ad9b985aa271aa8eec00beb21627c77dd76D"
589b285340071ac5a04d6fc61453fbc9ef5c7d6c4d24c934c944d51787ae5966D!
163f0d23cfe8fd01038ccb7746a4af46b5d8859204698181d3dcc73e81d8fb94D
ae74b02c469234e1874d6852f03edc12b68b262ee96a49590345a04f69d92c18D
4e2fdfb11cf1f7b0f724741e7730e02c2e6ab6bc2b306bf41ace3283e2b8739bD
1661002b4d684efd2898ed72901055d3f780eab559156150f5421b5f448d823d
Z { Z Vs- Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624Us- Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058Ts Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tSsy Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yRe Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270Qe Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
]s Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t\sy Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102y[e Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270Ze Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357rYqw Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nXms Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417Ws
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
N mX4 N rdqw Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286ncms Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,bqi Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501qass Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419`s
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371_s- Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624^s- Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z js- Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624is- Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058hs Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tgsy Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yfe Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270ee Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
qs!Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tpsy!Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yoe!Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270ne !Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357rmqw!Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nlms!Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417ks
Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
N mX4 N rxqw"Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nwms"Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,vqi"Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501quss!Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419ts
!Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371ss-!Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624rs-!Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z ~s-"Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624}s-"Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058|s"Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t{sy"Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yze"Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270ye "Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
s#Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tsy#Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102ye#Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270e #Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357rqw#Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286n ms#Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417s
"Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
N mX4 N r qw$Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286n ms$Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,
qi$Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501q ss#Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419s
#Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371s-#Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624s-#Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z s-$Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624s-$Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058s$Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tsy$Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102ye$Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270
e $Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
s%Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tsy%Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102ye%Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270e %Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357rqw%Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nms%Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417s
$Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
N mX4 N r qw&Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286n ms&Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417, qi&Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501q ss%Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419 s
%Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371s-%Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624s-%Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z &s-&Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624%s-&Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058$s&Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t#sy&Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102y"e&Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270!e &Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
-s'Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t,sy'Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102y+e'Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270*e 'Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357r)qw'Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286n(ms'Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417's
&Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
N mX4 N r4qw(Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286n3ms(Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,2qi(Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501q1ss'Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #18754190s
'Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371/s-'Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624.s-'Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z :s-(Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #19016249s-(Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #18480588s(Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t7sy(Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102y6e(Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #17782705e (Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
As)Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t@sy)Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102y?e)Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270>e )Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357r=qw)Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286n<ms)Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417;s
(Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
N mX4 N rHqw*Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nGms*Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,Fqi*Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501qEss)Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419Ds
)Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371Cs-)Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624Bs-)Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z Ns-*Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624Ms-*Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058Ls*Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tKsy*Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yJe*Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270Ie *Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
Us+Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tTsy+Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102ySe+Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270Re +Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357rQqw+Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nPms+Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417Os
*Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
e r+V: e D7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.
017e2d09736a9888ed8e38dca3b1a005fcfebb65e0d3d31617fa9ba35f62526dD-
7af718b81b8f45b39e82ed35fcd1065c8dd2f178f9310777598dc5f3544dd695D,
bdc8ab95aa96bf3f851a6cd97f2d9c878fe34101ff383e7ab7f2c5eb11a13d78D+
f0264bd6f2bbb5db07d005243d60a13920c116e9e1b122e88fab4886f3ff1bc8
N mX4 N r\qw,Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286n[ms,Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,Zqi,Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501qYss+Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419Xs
+Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371Ws-+Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624Vs-+Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z bs-,Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624as-,Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058`s,Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t_sy,Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102y^e,Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270]e ,Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
is-Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999thsy-Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yge-Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270fe -Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357reqw-Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286ndms-Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417cs
,Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
N mX4 N rpqw.Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286noms.Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,nqi.Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501qmss-Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419ls
-Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371ks--Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624js--Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z vs-.Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624us-.Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058ts.Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tssy.Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102yre.Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270qe .Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
}s/Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999t|sy/Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102y{e/Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270ze /Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357ryqw/Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nxms/Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417ws
.Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
N mX4 N rqw0Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286nms0Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417,qi0Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\@- Add window-grouper extension
Resolves: #1355845
- Add disable-screenshield extension
Resolves: #1643501qss/Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419 s
/Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371s-/Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624~s-/Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
Z { Z
s-0Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624 s-0Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058s0Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tsy0Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102ye0Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270e 0Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357
~
s1Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^- Adjust dash-to-dock for classic backports
Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
Resolves: #1613835
- Add accessible name to status icons
Resolves: #1600999tsy1Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^- Drop faulty patch from backport
Resolves: #1782102ye1Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]B- A couple of fixes to the classic backports
Resolves: #1778270e 1Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]V- Fix unwanted appearance of workspace switcher menu
Resolves: #1752357r
qw1Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic
Resolves: #1720286n ms1Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension
Resolves: #1702417 s
0Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371
mX $ =2Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233qss1Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*- Override lg foreground color
Resolves: #1875419s
1Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock
Resolves: #1904371s-1Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list
Resolves: #1901624s-1Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^- Fix workspace switch in window-list outside GNOME Classic
Resolves: #1848058
T Q T z y2Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860. Q2Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 2Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %2Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +2Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240+ K2Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
, S , #" =3Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233! 3Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240" G3Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987g yY2Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733 y72Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733g w[2Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860
Z R Z y(w3Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860-' Q3Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148& 3Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298% %3Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240$ +3Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*# K3Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
o! - %4Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240, +4Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240++ K4Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$* =4Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233f)u[3Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB- Bump for signing
- Resolves: #1892860
3 m>9 3 4 %5Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240g3yY4Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-287332y74Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733g1w[4Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z0y4Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860./ Q4Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148. 4Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
E m>9 E ;w5Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460g:yY5Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-287339y75Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733g8w[5Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z7y5Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.6 Q5Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#19421485 5Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
'?Q6Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
> 6Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213k=wc5Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e- Rebuild for signing
- Related: RHEL-23460~<w5Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e6@- safemath: add grub_cast for gcc < 5.1
- Related: RHEL-23460
v &Q v WBcM6Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QAcA6Peter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V@/6Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
A
h A #G =6Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233F 6Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"EG6Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987aDcc6Peter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rCc6Peter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
%/% L 7Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"KG7Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987aJcc7Peter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rIc7Peter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705WHcM7Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
` + ` Q 7Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298P %7Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240O +7Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*N K7Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240#M =7Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
e r+V: e DD
f5037b5658870caf9db57fef7e511d690b1959170ab11cfda5aa83f814633ba2DC
17166fc5096e5f62c88e7eff8f2e850bf452600e5d52eaf11a1dff4bc21c285fDB
6ddc8fea6aac5d2cf395f1d06506d529fc6fde104aa7ced09ed3d16f8996db76DA
50c11af52b9c7aba5a74a2beb07e802550af036c3a37feb00b9bfca7b241ffa1D@
3f5208ad5e6d40b1cdbd818874e03c204f1a94371bda2f9525511fe0a0803522D?
91c532ed3ffc0c3a3ff8c2e0c2f2eea28b1497fd586422e4640ae48504011029D>
53dc9de016bb6fc2c1a005c20044580f8d5de2f99f77df7527b054e08cb02e1eD=
ba3679dbdaf62ecae1a485bd198e4127a1c7605fffa6492fb32ed97c97eff892D<
c13dc951f499e2d4af158a7e69ac636e75289d333b51e67cf3b6c1c3b573e7dfD;
553cb086c6ccc5df943b00d1342272a201f6f00d3833176eb02708135da3101eD:
27bc90124c2fa6f18a9edb3748c392b723f315a736b6b34038195625871ecf2bD9
abb495131866830ec1e5474b69876de363e44c471e7221b10ce992f1f526f966D8
4aea4b143d8173155f3ca2e53011c25de372518c46da064056b3507555cdc03a
A
h A #V =8Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233U 8Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"TG8Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987aScc8Peter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rRc8Peter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
R -[ Q8Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148Z 8Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298Y %8Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240X +8Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*W K8Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240 of
flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv|
7B
8I
9P
;V
<]
=d
>j
?q
@x
A~
B
C
D
E
F
G&
H-
I4
J:
KA
LH
MN
NU
P\
Qb
Ri
Sp
Tv
U}
V
W
X
Y
Z
["
\(
]-
^4
_;
`?
aB
bG
cL
dQ
fV
g[
i_
jb
kg
lm
mr
nx
o}
p
q
r
s
t
u
v!
w&
x+
y/
z2
{7
|=
}B
~H
M
T
[
_
b
g
l
q
v
{
$
+
/
2
7
<
A
F
K
O
R
W
]
b
h
m
t
{
r '_Q9Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
^ 9Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213+]Y9Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\@- Ignore the modification time when doing RPM verification of /boot/efi files
Resolves: rhbz#1496952J\9Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\+@- Prevent errors from diskfilter scan of removable drives
Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
Resolves: rhbz#1614259
v &Q v WbcM9Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QacA9Peter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V`/9Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
)
) +g K:Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$f =:Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233"eG9Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987adcc9Peter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rcc9Peter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
a2 gmw[:Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zly:Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.k Q:Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148j :Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298i %:Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240h +:Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240
eU #r =;Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233q ;Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"pG;Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987goyY:Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733ny7:Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733
Z R Z yxw;Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860-w Q;Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148v ;Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298u %;Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240t +;Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*s K;Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
o! } %<Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240| +<Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240+{ K<Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$z =<Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233fyu[;Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB- Bump for signing
- Resolves: #1892860
3 m>9 3 %=Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240gyY<Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733y7<Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gw[<Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z y<Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860. Q<Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148~ <Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
E m>9 E w=Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460g
yY=Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733 y7=Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gw[=Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zy=Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860. Q=Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
'Q>Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
>Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213k
wc=Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e- Rebuild for signing
- Related: RHEL-23460~ w=Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e6@- safemath: add grub_cast for gcc < 5.1
- Related: RHEL-23460
v &Q v WcM>Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QcA>Peter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V/>Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
A
h A # =>Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233 >Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"G>Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987acc>Peter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rc>Peter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
%/% ?Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"G?Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987acc?Peter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rc?Peter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705WcM?Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
` + ` ! ?Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %?Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +?Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240* K?Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240# =?Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
A
h A #& =@Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233% @Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"$G@Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a#cc@Peter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r"c@Peter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
R -+ Q@Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148* @Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298) %@Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240( +@Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*' K@Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
r '/QAJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
. AJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213+-YAJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\@- Ignore the modification time when doing RPM verification of /boot/efi files
Resolves: rhbz#1496952J,AJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\+@- Prevent errors from diskfilter scan of removable drives
Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
Resolves: rhbz#1614259
v &Q v W2cMAPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311Q1cAAPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V0/AJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
)
) +7 KBJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$6 =BJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233"5GAJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a4ccAPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r3cAPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
a2 g=w[BRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z<yBRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.; QBJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148: BJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#17592989 %BJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#18922408 +BJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240
eU #B =CJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233A CJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"@GCJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987g?yYBRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733>y7BRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733
Z R Z yHwCRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860-G QCJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148F CJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298E %CJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240D +CJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*C KCJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
o! M %DJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240L +DJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240+K KDJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$J =DJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233fIu[CRobbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB- Bump for signing
- Resolves: #1892860
3 m>9 3 T %EJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240gSyYDRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733Ry7DRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gQw[DRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zPyDRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.O QDJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148N DJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
e r+V: e DQ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 m>9 E [wENicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460gZyYERobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733Yy7ERobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gXw[ERobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zWyERobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.V QEJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148U EJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
'_QFJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
^ FJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213k]wcENicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e- Rebuild for signing
- Related: RHEL-23460~\wENicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e6@- safemath: add grub_cast for gcc < 5.1
- Related: RHEL-23460
v &Q v WbcMFPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QacAFPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V`/FJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
A
h A #g =FJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233f FJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"eGFJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987adccFPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rccFPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
%/% l GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"kGGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987ajccGPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705ricGPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705WhcMGPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
` + ` q GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298p %GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240o +GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*n KGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240#m =GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
A
h A #v =HJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233u HJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"tGHJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987asccHPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rrcHPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
R -{ QHJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148z HJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298y %HJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240x +HJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*w KHJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
r 'QIJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
~ IJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213+}YIJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\@- Ignore the modification time when doing RPM verification of /boot/efi files
Resolves: rhbz#1496952J|IJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\+@- Prevent errors from diskfilter scan of removable drives
Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
Resolves: rhbz#1614259
v &Q v WcMIPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QcAIPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V /IJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
)
) + KJJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$ =JJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233"GIJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987accIPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rcIPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
a2 g
w[JRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z yJRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860. QJJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148
JJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %JJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +JJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240
eU # =KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233 KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"GKJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987gyYJRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733y7JRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733
Z R Z ywKRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860- QKJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240* KKJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
o! %LJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +LJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240+ KLJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$ =LJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233fu[KRobbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB- Bump for signing
- Resolves: #1892860
3 m>9 3 $ %MJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240g#yYLRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733"y7LRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733g!w[LRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z yLRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860. QLJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 LJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
E m>9 E +wMNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460g*yYMRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733)y7MRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733g(w[MRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z'yMRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.& QMJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148% MJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
'/QNJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
. NJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213k-wcMNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e- Rebuild for signing
- Related: RHEL-23460~,wMNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e6@- safemath: add grub_cast for gcc < 5.1
- Related: RHEL-23460
v &Q v W2cMNPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311Q1cANPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V0/NJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
A
h A #7 =NJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-202336 NJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"5GNJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a4ccNPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r3cNPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
%/% < OJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240";GOJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a:ccOPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r9cOPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705W8cMOPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
` + ` A OJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298@ %OJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240? +OJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*> KOJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240#= =OJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
A
h A #F =PJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233E PJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"DGPJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987aCccPPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rBcPPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
R -K QPJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148J PJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298I %PJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240H +PJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*G KPJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
r 'OQQJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
N QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213+MYQJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\@- Ignore the modification time when doing RPM verification of /boot/efi files
Resolves: rhbz#1496952JLQJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\+@- Prevent errors from diskfilter scan of removable drives
Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
Resolves: rhbz#1614259
v &Q v WRcMQPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QQcAQPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311VP/QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
)
) +W KRJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$V =RJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233"UGQJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987aTccQPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rScQPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
e r+V: e D^
9cd2077252d68212f08dd81f3353a8d296b4983fd631071221ad12978b80e2d3D]
fa40075494cdb791de80bb9dd16a60c61c5e4200559523fc4cb22ded671eda5aD\
9df3dd0592a54ada722f373efb2ba882dada990b05e08814608a1d5fb236de64D[
1b5fd99f401b83a160bcf8506fd135056203e2df730c72f49440fe457a1ec20eDZ
3d0d4dbcbdb1f804aa9e133124ebb735a5037654221d45f8e93d4e81c3cc2f75DY
ce893faa55582d8281001d9876f4ceaddca9de5adf25f32692196a6e85a1aa48DX
4c3662507f01c062009127bb3ab45ab19236e6dcc70fe08ca363713b45cf9229DW
fede7faa428def30a78d440b2dfd020e0a972bca7601dbd552274dc2f98434c9DV
c03ba838a367a50725a5bad5793e263d9c1c7d7e962a29cd8e0b093cf5a0056dDU
c30d6ca286d3a7294da3e5596cf791d5c1314667173d02f21d751e689e05d52bDT
2543d29db08633a435d64df84ea00c6bdfb481a55fd6621a7e31190ab94c1ddfDS
783b344765a19ddce5583dff7a5df7639ac3de2a002a21d71a0528d6aaae8258DR
d80f9a89dac504f4ac37f8ea511d7ea892e9a02e191b8bf374506a66f6ff3395
a2 g]w[RRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z\yRRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.[ QRJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148Z RJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298Y %RJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240X +RJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240
eU #b =SJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233a SJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"`GSJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987g_yYRRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733^y7RRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733
Z R Z yhwSRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860-g QSJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148f SJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298e %SJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240d +SJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*c KSJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
o! m %TJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240l +TJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240+k KTJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$j =TJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233fiu[SRobbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB- Bump for signing
- Resolves: #1892860
3 m>9 3 t %UJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240gsyYTRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733ry7TRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gqw[TRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zpyTRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.o QTJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148n TJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
E m>9 E {wUNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460gzyYURobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733yy7URobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gxw[URobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zwyURobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.v QUJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148u UJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
'QVJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
~ VJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213k}wcUNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e- Rebuild for signing
- Related: RHEL-23460~|wUNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e6@- safemath: add grub_cast for gcc < 5.1
- Related: RHEL-23460
v &Q v WcMVPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QcAVPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V /VJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
A
h A # =VJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233 VJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"GVJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987accVPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rcVPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
%/% WJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240" GWJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a
ccWPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r cWPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705WcMWPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
` + ` WJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %WJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +WJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240* KWJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240#
=WJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
A
h A # =XJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233 XJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"GXJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987accXPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rcXPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
R - QXJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 XJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %XJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +XJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240* KXJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
r ' QYJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
YJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213+ YYJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\@- Ignore the modification time when doing RPM verification of /boot/efi files
Resolves: rhbz#1496952J YJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\+@- Prevent errors from diskfilter scan of removable drives
Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
Resolves: rhbz#1614259
v &Q v W"cMYPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311Q!cAYPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V /YJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
)
) +' KZJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$& =ZJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233"%GYJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a$ccYPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r#cYPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
a2 g-w[ZRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z,yZRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.+ QZJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148* ZJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298) %ZJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240( +ZJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240
eU #2 =[Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-202331 [Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"0G[Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987g/yYZRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733.y7ZRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733
Z R Z y8w[Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860-7 Q[Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#19421486 [Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#17592985 %[Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#18922404 +[Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*3 K[Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
o! = %\Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240< +\Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240+; K\Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$: =\Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233f9u[[Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB- Bump for signing
- Resolves: #1892860
3 m>9 3 D %]Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240gCyY\Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733By7\Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gAw[\Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z@y\Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.? Q\Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148> \Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
E m>9 E Kw]Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460gJyY]Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733Iy7]Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gHw[]Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zGy]Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.F Q]Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148E ]Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
'OQ^Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
N ^Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213kMwc]Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e- Rebuild for signing
- Related: RHEL-23460~Lw]Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e6@- safemath: add grub_cast for gcc < 5.1
- Related: RHEL-23460
v &Q v WRcM^Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QQcA^Peter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311VP/^Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
A
h A #W =^Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233V ^Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"UG^Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987aTcc^Peter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rSc^Peter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
e r+V: e Dk
7999b3417dab3aca80a1f8a57c6a7b9f98efab7f9c530e0131e8ee2cbd026459Dj
42ea2b85b1cebb4239ade45fc36a1b309a29b95be50d26bf314165428aeb66acDi
f659cc4a3ded31fe85ee2123860696b26f1983182f66c76b6a76d0e5dc5f3d2fDh
035b347d3201307242fcde833202a8aa1505b93cbfed75f9f4aa400f16f19cefDg
c4c001caa89f5bff6fb1c4dbee4050dbbb93bd7c79c16d2c309103992c0b7987Df
104ab2ef65171e91197d612304922a2a41a03bb8e9cbd65666f2899ffca2d489De
6629074551d9fb3315ab487254009bfbf5ff68dc9d1c73b4aa5c866e5448129cDd
eeb0a2f82f3dc57694d35b3eaf181212193a3ecdcce63837ee1d869a138901d0Dc
1ffc8e6c986e1cc0d0bec287cc7ad4bbb77cd0ccc1bcb147a4d5be35dbe062eaDb
311a90d5eda02bf4ce86639848bc226ee6a17f1a66b1f15375a48b77a3d6b9acDa
5d260748ee7254fcf65c3e3312e541e2f9883d21279926f45ee85ad44eb5b4e7D`
7709c0d2acd7ad42cb32f7de9cac262193958bda0a1f863ea37484f52147282aD_
62597c6811ab1a4372c93868c223a056ac2947a911f6b318ab3df4ead1b06de3
%/% \ _Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"[G_Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987aZcc_Peter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rYc_Peter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705WXcM_Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
` + ` a _Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298` %_Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240_ +_Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*^ K_Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240#] =_Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
A
h A #f =`Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233e `Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"dG`Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987accc`Peter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rbc`Peter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
R -k Q`Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148j `Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298i %`Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240h +`Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*g K`Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
r 'oQaJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
n aJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213+mYaJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\@- Ignore the modification time when doing RPM verification of /boot/efi files
Resolves: rhbz#1496952JlaJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\+@- Prevent errors from diskfilter scan of removable drives
Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
Resolves: rhbz#1614259
v &Q v WrcMaPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QqcAaPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311Vp/aJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
)
) +w KbJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$v =bJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233"uGaJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987atccaPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rscaPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
a2 g}w[bRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z|ybRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.{ QbJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148z bJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298y %bJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240x +bJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240
eU # =cJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233 cJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240" GcJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987gyYbRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733~y7bRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733
Z R Z ywcRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860- QcJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 cJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %cJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +cJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240* KcJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
o!
%dJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +dJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240+ KdJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$
=dJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233f u[cRobbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB- Bump for signing
- Resolves: #1892860
3 m>9 3 %eJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240gyYdRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733y7dRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gw[dRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zydRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860. QdJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 dJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
E m>9 E weNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460gyYeRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733y7eRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gw[eRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zyeRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860. QeJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 eJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
' QfJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
fJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213k wceNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e- Rebuild for signing
- Related: RHEL-23460~ weNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e6@- safemath: add grub_cast for gcc < 5.1
- Related: RHEL-23460
v &Q v W"cMfPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311Q!cAfPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V /fJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
A
h A #' =fJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233& fJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"%GfJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a$ccfPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r#cfPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
%/% , gJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"+GgJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a*ccgPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r)cgPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705W(cMgPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
` + ` 1 gJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#17592980 %gJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240/ +gJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*. KgJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240#- =gJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
A
h A #6 =hJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-202335 hJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"4GhJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a3cchPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r2chPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
R -; QhJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148: hJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#17592989 %hJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#18922408 +hJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*7 KhJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
r '?QiJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
> iJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213+=YiJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\@- Ignore the modification time when doing RPM verification of /boot/efi files
Resolves: rhbz#1496952J<iJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\+@- Prevent errors from diskfilter scan of removable drives
Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
Resolves: rhbz#1614259
v &Q v WBcMiPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QAcAiPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V@/iJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
)
) +G KjJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$F =jJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233"EGiJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987aDcciPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rCciPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
a2 gMw[jRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zLyjRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.K QjJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148J jJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298I %jJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240H +jJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240
eU #R =kJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233Q kJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"PGkJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987gOyYjRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733Ny7jRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733
Z R Z yXwkRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860-W QkJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148V kJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298U %kJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240T +kJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*S KkJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
o! ] %lJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240\ +lJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240+[ KlJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$Z =lJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233fYu[kRobbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB- Bump for signing
- Resolves: #1892860
e r+V: e Dx
ee54ecaecccdbbb8de156e19a27d770e04d61778a19ef2dc30478b7fcfe65865Dw
664f64a4a6b87e761d7b0bc0efba577178e77a23ec390ffb222b9caee6c3206aDv
557d4fb63564285a746012864ee4fa67be9d0f1756df5771b7f9380de46393c5Du
61afac8f37a4ea3ff4615ff2c44e669f884f9d092a45699fc0fd2dcac09465d8Dt
82932d0635147c1a6bbad3358a167d3e6f1a59a1ee3cce64d41ef8729a3f2993Ds
ebce0b46fb13981f4746adf603b6f96c83356c88ae4ed0053fdb5b506fbb97b1Dr
63c3055a3e9d4079dcbfedfed3e049509ed10bdc0f3de7959902ff8cfcec5e9fDq
05a40b72da0cf303bc79e3b58cda8c7f7edb3f19a201eca57225af9a1e012bebDp
c7a38de9170db3ea671c715e4f878f1c3731c4a067bcb77c2c9827c8cd02d694Do
1a506ab0d1bb5fe446384f454d2e3cccb4d626df0d87e0effd61680d6a9d026bDn
e769db0a6566751d86087f44601cb2aedbda527c4a514beaa8e8a1f4a9d2d02eDm
bcebc5d5ae20b6fbf0a5f35a2831414d8ad7aa1ea1720883560416fbd5db15b7Dl
a4e5c86a1cca9f1fc22a2b9ee7b057a8c3cf9a4e26ee74373e8878ad6288731a
3 m>9 3 d %mJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240gcyYlRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733by7lRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gaw[lRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z`ylRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860._ QlJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148^ lJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
E m>9 E kwmNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460gjyYmRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733iy7mRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733ghw[mRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zgymRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.f QmJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148e mJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
'oQnJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
n nJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213kmwcmNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e- Rebuild for signing
- Related: RHEL-23460~lwmNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e6@- safemath: add grub_cast for gcc < 5.1
- Related: RHEL-23460
v &Q v WrcMnPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QqcAnPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311Vp/nJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
A
h A #w =nJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233v nJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"uGnJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987atccnPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rscnPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
%/% | oJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"{GoJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987azccoPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rycoPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705WxcMoPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
` + ` oJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %oJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +oJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*~ KoJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240#} =oJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
A
h A # =pJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233 pJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"GpJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987accpPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rcpPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
R - QpJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148
pJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %pJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +pJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240* KpJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240 of !flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv|
'
-
2
8
=
D
K
O
R
W
\
a
f
k
o
r
w
}
"
'
,
1
6
;
?
B
G
M
R
X
]
d
k
o
r
w
|
"
(
-
4
;
?
B
G
L
Q
V
[
_
b
g
m
r
x
}
!
&
+
/ 2 7 = B H M T [ _
b g l
q v {
$ + / 2 7 < A F K O
r 'QqJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
qJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213+
YqJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\@- Ignore the modification time when doing RPM verification of /boot/efi files
Resolves: rhbz#1496952J qJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\+@- Prevent errors from diskfilter scan of removable drives
Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
Resolves: rhbz#1614259
v &Q v WcMqPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QcAqPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V/qJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
)
) + KrJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$ =rJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233"GqJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987accqPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rcqPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
a2 g w[rRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z yrRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860. QrJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 rJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %rJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +rJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240
eU #" =sJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233! sJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240" GsJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987g yYrRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733 y7rRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733
Z R Z y(wsRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860-' QsJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148& sJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298% %sJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240$ +sJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*# KsJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
o! - %tJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240, +tJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240++ KtJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$* =tJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233f)u[sRobbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB- Bump for signing
- Resolves: #1892860
3 m>9 3 4 %uJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240g3yYtRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-287332y7tRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733g1w[tRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z0ytRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860./ QtJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148. tJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
E m>9 E ;wuNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460g:yYuRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-287339y7uRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733g8w[uRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z7yuRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.6 QuJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#19421485 uJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
'?QvJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
> vJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213k=wcuNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e- Rebuild for signing
- Related: RHEL-23460~<wuNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e6@- safemath: add grub_cast for gcc < 5.1
- Related: RHEL-23460
v &Q v WBcMvPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QAcAvPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V@/vJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
A
h A #G =vJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233F vJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"EGvJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987aDccvPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rCcvPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
%/% L wJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"KGwJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987aJccwPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rIcwPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705WHcMwPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
` + ` Q wJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298P %wJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240O +wJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*N KwJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240#M =wJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
A
h A #V =xJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233U xJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"TGxJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987aSccxPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rRcxPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
R -[ QxJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148Z xJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298Y %xJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240X +xJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*W KxJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
e r+V: e D
e319773b66bb4f0227b1608807845710d392639797e4f0e6714024b71cb7b1f7D
56b6f928a45667b9da2599adf7728717580afc5e3ce24bbe5dfa41d4e9881447D
648913500d3bbad2fc637cb3b8d8bfeafa3a89bbf0fb33504657bab719b25763D
bd9209ce7471aae3638a5d0464764e35ae7dd88dd1526747997c8bbec7ceb786D
bd55b6e53bef2770d4702bf6fb6bcd13145e761a809da1a07423a7e1e3898f82D
de291c1622d5eebba6a97c0060a631087ecd9651815e7294c243b6f31e580508D
ec3383b51ed106826513f9c2945df6ff25b528b122a9b848b069c9e8d6cb5e46D~
b929a42b8d0177a7813b33484e7fc53ee017c678c48081d067dcde010be775d9D}
70d313100de0a9a28bad9868e3267b01f56634e7b633d7519f3153020d8c77b7D|
82b2eaccefb7228d0de8dd9a88417b5a3b5cd4911bacf3931b092c0c35f16e7aD{
88e98b9e84008f81960ec7ef7833a591eded866cb407e6fef47c13d1ecb21d53Dz
8ee9327d2fb76742bd611491c6f916eebd397da0976737f7b48eec36a25080b9Dy
f2ef03a6ec5037c50e7f13a6a7c2465e14b247e48ec9b158e91bbf86094e3dd1
r '_QyJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
^ yJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213+]YyJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\@- Ignore the modification time when doing RPM verification of /boot/efi files
Resolves: rhbz#1496952J\yJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\+@- Prevent errors from diskfilter scan of removable drives
Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
Resolves: rhbz#1614259
v &Q v WbcMyPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QacAyPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V`/yJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
)
) +g KzJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$f =zJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233"eGyJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987adccyPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rccyPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
a2 gmw[zRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zlyzRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.k QzJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148j zJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298i %zJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240h +zJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240
eU #r ={Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233q {Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"pG{Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987goyYzRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733ny7zRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733
Z R Z yxw{Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860-w Q{Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148v {Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298u %{Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240t +{Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*s K{Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
o! } %|Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240| +|Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240+{ K|Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$z =|Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233fyu[{Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB- Bump for signing
- Resolves: #1892860
3 m>9 3 %}Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240gyY|Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733y7|Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gw[|Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z y|Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860. Q|Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148~ |Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
E m>9 E w}Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460g
yY}Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733 y7}Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gw[}Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zy}Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860. Q}Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 }Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
'Q~Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
~Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213k
wc}Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e- Rebuild for signing
- Related: RHEL-23460~ w}Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e6@- safemath: add grub_cast for gcc < 5.1
- Related: RHEL-23460
v &Q v WcM~Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QcA~Peter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V/~Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
A
h A # =~Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233 ~Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"G~Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987acc~Peter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rc~Peter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
%/% Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987accPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rcPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705WcMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
` + ` ! Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240* KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240# =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
A
h A #& =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233% Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"$GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a#ccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r"cPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
R -+ QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148* Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298) %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240( +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*' KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
r '/QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
. Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213+-YJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\@- Ignore the modification time when doing RPM verification of /boot/efi files
Resolves: rhbz#1496952J,Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\+@- Prevent errors from diskfilter scan of removable drives
Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
Resolves: rhbz#1614259
v &Q v W2cMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311Q1cAPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V0/Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
)
) +7 KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$6 =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233"5GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a4ccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r3cPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
a2 g=w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z<yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.; QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148: Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#17592989 %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#18922408 +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240
eU #B =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233A Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"@GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987g?yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733>y7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733
Z R Z yHwRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860-G QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148F Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298E %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240D +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*C KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
o! M %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240L +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240+K KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$J =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233fIu[Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB- Bump for signing
- Resolves: #1892860
3 m>9 3 T %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240gSyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733Ry7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gQw[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zPyRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.O QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148N Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
E m>9 E [wNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460gZyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733Yy7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gXw[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zWyRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.V QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148U Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
'_QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
^ Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213k]wcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e- Rebuild for signing
- Related: RHEL-23460~\wNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e6@- safemath: add grub_cast for gcc < 5.1
- Related: RHEL-23460
e r+V: e D
36aad460808510bfa2e38f113711d7d1b1ec88d77ddb1badbedd8829e5c8dd02D
456aa067cc96e03aaa605e52a86cc973f7a8dab09337cce112097a4608dd143aD
c4bb36e81ea1d28a9b054d4a06f11d8ff53cc6d3f1e8523504685e0998b38dd6D
27bf800e475fe735de26f8983bba34eab9261ed1b48593690d77e5bc7d0acde1D
93a54cb9f013c14a0d42bbb9abed4ec7186612d1288e74148ff8fa20ccc973a6D
2445bee7e1332244f8b40961bfe9f59880197fd2e4ea9800c0b288239d229acbD
6c1525a5d4f0e9045c028f3d1abe0c4e7e9aa2e3216a1472b79d3f60b02d135dD
e0b87fa8a61f451d3299d6569707241d3342eab4af1de892fd6bf8e03d5551d8D
4bb74807b09db308a56c244e21970f4698de871955175c9b552234229de92f91D
dc1039bae026e06f606e2a26e159743f3cf3ed19a75609cb5664372c17b4d90cD
4011ecba5e1b135d1f741f84948ead212a82a060f0cf75bab01b2a37fdd319c0D
504528b2f64bf9e246a93ff851b9fbf624d77355d1d57587ae1acaa4522c8fcbD
fa679cc7ff7900d485618ebb16638390e1b2e4a43f1278263dc8722680e307ab
v &Q v WbcMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QacAPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V`/Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
A
h A #g =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233f Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"eGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987adccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rccPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
%/% l Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"kGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987ajccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705ricPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705WhcMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
` + ` q Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298p %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240o +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*n KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240#m =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
A
h A #v =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233u Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"tGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987asccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rrcPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
R -{ QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148z Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298y %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240x +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*w KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
r 'QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
~ Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213+}YJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\@- Ignore the modification time when doing RPM verification of /boot/efi files
Resolves: rhbz#1496952J|Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\+@- Prevent errors from diskfilter scan of removable drives
Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
Resolves: rhbz#1614259
v &Q v WcMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QcAPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V /Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
)
) + KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$ =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233"GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987accPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rcPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
a2 g
w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860. QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148
Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240
eU # =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987gyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733y7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733
Z R Z ywRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860- QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240* KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
o! %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240+ KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$ =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233fu[Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB- Bump for signing
- Resolves: #1892860
3 m>9 3 $ %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240g#yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733"y7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733g!w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860. QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
E m>9 E +wNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460g*yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733)y7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733g(w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z'yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.& QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148% Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
'/QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
. Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213k-wcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e- Rebuild for signing
- Related: RHEL-23460~,wNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e6@- safemath: add grub_cast for gcc < 5.1
- Related: RHEL-23460
v &Q v W2cMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311Q1cAPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V0/Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
A
h A #7 =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-202336 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"5GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a4ccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r3cPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
%/% < Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240";GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a:ccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r9cPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705W8cMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
` + ` A Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298@ %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240? +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*> KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240#= =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
A
h A #F =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233E Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"DGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987aCccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rBcPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
R -K QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148J Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298I %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240H +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*G KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
r 'OQJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
N Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213+MYJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\@- Ignore the modification time when doing RPM verification of /boot/efi files
Resolves: rhbz#1496952JLJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\+@- Prevent errors from diskfilter scan of removable drives
Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
Resolves: rhbz#1614259
v &Q v WRcMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QQcAPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311VP/Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
)
) +W KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$V =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233"UGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987aTccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rScPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
a2 g]w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z\yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.[ QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148Z Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298Y %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240X +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240
eU #b =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233a Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"`GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987g_yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733^y7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733
e r+V: e D
81c536f389863d868ed8bc21eae1b2225ce8631429c5df133d0e769c3f340f77D
324c9d5ad49eb48866d128a022079508c40c45aa4d4176abc382f606369448d0D
7179cfedeaf917db1ff4e9e2c9261746c977c39ff98d06e7bed342cca2633c45D
9eb8a6c91f46c6b191c972052582bf84913f5b8b77d733b9a22599022ce86a8bD
20d48e214a59a2848b7152ea8c378eda0ab10d93902bef3627ec70603b8ad96fD
1b94bec42529799dff727dd6082c4b038c96227041b81d95f21ee5457cb4c089D
4ed29d175fb03385533dbaacc9824611743ebcc84d3ce5fa6f376a5568058d49D
9a5aad884099ccb669c4d020f69ddfec584bec4cb676f93818cd67346ee348d0D
7d9adf9e27536faf7c726121ff0e58d8a0d0c473168713c55c95d74da74c2ebfD
938086442b2d90233bb54c18a12a65965685e408b96dafa4e36c18a4179676dfD
0d89f6cb70bf9117dfd174a86c11de319ac44c664effcaa3b959f00d436ae1a2D
92dc223c986a6952b0510b50be70d54b8def042975f883b9a1ecb8d0f62a138bD
f566582c4354cf859dbaad8604aeac5c8344f7e81c02de69fe4124ea1537501c
Z R Z yhwRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860-g QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148f Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298e %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240d +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*c KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
4 h9 4 oy7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gnw[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zmyRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.l QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148k Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298j %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240fiu[Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB- Bump for signing
- Resolves: #1892860
'uQJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
t Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213kswcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e- Rebuild for signing
- Related: RHEL-23460~rwNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e6@- safemath: add grub_cast for gcc < 5.1
- Related: RHEL-23460qwNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460gpyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733
v &Q v WxcMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QwcAPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311Vv/Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
A
h A #} =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233| Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"{GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987azccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rycPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
%/% Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a ccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rcPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705W~cMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
` + ` Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240* KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240# =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
A
h A # =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"
GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a ccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rcPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
R - QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*
KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
r 'QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213+YJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\@- Ignore the modification time when doing RPM verification of /boot/efi files
Resolves: rhbz#1496952JJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\+@- Prevent errors from diskfilter scan of removable drives
Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
Resolves: rhbz#1614259
v &Q v WcMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QcAPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V/Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
)
) + KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$ =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233"GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987accPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rcPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
a2 g#w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z"yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.! QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240
eU #( =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233' Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"&GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987g%yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733$y7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733
Z R Z y.wRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860-- QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148, Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298+ %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240* +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*) KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
o! 3 %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#18922402 +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240+1 KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$0 =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233f/u[Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB- Bump for signing
- Resolves: #1892860
3 m>9 3 : %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240g9yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-287338y7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733g7w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z6yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.5 QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#19421484 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
E m>9 E AwNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460g@yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733?y7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733g>w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z=yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.< QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148; Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
'EQJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
D Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213kCwcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e- Rebuild for signing
- Related: RHEL-23460~BwNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e6@- safemath: add grub_cast for gcc < 5.1
- Related: RHEL-23460
v &Q v WHcMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QGcAPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311VF/Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
A
h A #M =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233L Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"KGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987aJccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rIcPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
%/% R Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"QGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987aPccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rOcPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705WNcMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
` + ` W Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298V %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240U +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*T KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240#S =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
A
h A #\ =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233[ Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"ZGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987aYccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rXcPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
R -a QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148` Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298_ %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240^ +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*] KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
e r+V: e D,
7ed3fc20ba01570a826ffa2af023ade0d8581765238cc534b73fe6e9508c4bebD+
6a3415f454a536cd4bddf7dbc03ff8c17e3484e1d6e9df356fd2660f6f7a96b3D*
2e5c474731992282d7faabe7c8d55f7253fbce05507a987f3bd332681c4e839cD)
97484ec3860cbfbbd5c2af0639469ee8d66a3f43238adbf11b9b14a0c86c978aD(
37726d4a426ccbdf697e55aa4f02f394d32283a3df6de51d99714a596409ae64D'
e446b1822c2b1f232e747d463041aa38f581221d371740705042a6966578d818D&
87c30f42a079f461de618eaafd1eeb3225bf684cb0b4fe11da401f0550be3c80D%
3cd32436440b9a64a4f9971f907fba98209aeed82000b3d7441689e93ed58cb6D$
6765ca1b27d1b3812e3c6442a00515395c3887ebcddeefb849912f45c005c54eD#
3ea9a16edeb166326b2db578b5d4fbc8f9700179808b798dd4c33c6f0d273beaD"
573cc1166190452dbe3b43b1be7bef29a1ffa0ed9f8dbfd29b063674c60834d3D!
78d3877b596cc832e4549e218cae35c884640fcb1d8e5764ee09a774a110fb45D
b301b3885fb4d5b57bd90b729ff75d74dc31e2f35a8ae3b5efa64901202f1497
r 'eQJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
d Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213+cYJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\@- Ignore the modification time when doing RPM verification of /boot/efi files
Resolves: rhbz#1496952JbJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\+@- Prevent errors from diskfilter scan of removable drives
Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
Resolves: rhbz#1614259
v &Q v WhcMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QgcAPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311Vf/Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
)
) +m KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$l =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233"kGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987ajccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705ricPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
a2 gsw[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zryRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.q QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148p Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298o %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240n +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240
eU #x =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233w Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"vGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987guyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733ty7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733
Z R Z y~wRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860-} QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148| Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298{ %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240z +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*y KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
o! %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240+ KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$ =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233fu[Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB- Bump for signing
- Resolves: #1892860
3 m>9 3
%Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240g yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733y7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gw[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zyRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860. QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
E m>9 E wNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460gyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733y7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gw[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z
yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860. QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
'QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213kwcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e- Rebuild for signing
- Related: RHEL-23460~wNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e6@- safemath: add grub_cast for gcc < 5.1
- Related: RHEL-23460
v &Q v WcMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QcAPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V/Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
A
h A # =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987accPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rcPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
%/% " Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"!GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a ccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r cPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705W cMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
` + ` ' Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298& %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240% +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*$ KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240## =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
A
h A #, =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233+ Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"*GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a)ccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r(cPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
R -1 QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#19421480 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298/ %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240. +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*- KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
r '5QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
4 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213+3YJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\@- Ignore the modification time when doing RPM verification of /boot/efi files
Resolves: rhbz#1496952J2Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\+@- Prevent errors from diskfilter scan of removable drives
Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
Resolves: rhbz#1614259
v &Q v W8cMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311Q7cAPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V6/Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765 of flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| "W #] $b &h 'o (u )x *} + , - . / 0 1 2# 3( 4. 53 6: 7A 8E 9H :M ;R <W =\ >a @e Ah Bm Cs Dx E~ F G
H I J K L" M' N, O1 P5 Q8 S= TC UH VN WS XZ Ya Ze \h ]m ^r _w `| a b c d
e f g h# i* j1 k5 l8 m= nB oG pL qQ rU sX t] uc vh xn ys zz { | } ~
! % ( / 7 > F M U \ d k r z '
)
) += KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$< =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233";GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a:ccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r9cPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
a2 gCw[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zByRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.A QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148@ Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298? %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240> +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240
eU #H =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233G Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"FGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987gEyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733Dy7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733
Z R Z yNwRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860-M QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148L Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298K %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240J +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*I KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
o! S %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240R +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240+Q KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$P =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233fOu[Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB- Bump for signing
- Resolves: #1892860
3 m>9 3 Z %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240gYyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733Xy7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gWw[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zVyRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.U QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148T Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
E m>9 E awNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460g`yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733_y7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733g^w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z]yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.\ QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148[ Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
'eQJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
d Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213kcwcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e- Rebuild for signing
- Related: RHEL-23460~bwNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e6@- safemath: add grub_cast for gcc < 5.1
- Related: RHEL-23460
e r+V: e D9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.
201819cd83614093dbe14240fec542722aadee2886e13b2006ee8f6f0c063950D-
bbc7199164da8d3b64fe85a385ca152120db612e702d3318ac67877b9c25e534
v &Q v WhcMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QgcAPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311Vf/Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
A
h A #m =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233l Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"kGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987ajccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705ricPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
%/% r Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"qGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987apccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rocPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705WncMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
` + ` w Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298v %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240u +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*t KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240#s =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
A
h A #| =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233{ Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"zGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987ayccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rxcPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
R - QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240~ +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*} KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
r 'QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213+YJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\@- Ignore the modification time when doing RPM verification of /boot/efi files
Resolves: rhbz#1496952JJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\+@- Prevent errors from diskfilter scan of removable drives
Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
Resolves: rhbz#1614259
v &Q v WcMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QcAPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V/Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
)
) +
KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$ =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233" GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a
ccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r cPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
a2 gw[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zyRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860. QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240
eU # =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987gyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733y7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733
Z R Z y wRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860- QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240* KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
o! # %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240" +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240+! KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$ =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233f u[Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB- Bump for signing
- Resolves: #1892860
3 m>9 3 * %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240g)yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733(y7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733g'w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z&yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.% QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148$ Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
E m>9 E 1wNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460g0yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733/y7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733g.w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z-yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860., QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148+ Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
'5QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
4 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213k3wcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e- Rebuild for signing
- Related: RHEL-23460~2wNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e6@- safemath: add grub_cast for gcc < 5.1
- Related: RHEL-23460
v &Q v W8cMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311Q7cAPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V6/Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
A
h A #= =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233< Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240";GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a:ccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r9cPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
%/% B Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"AGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a@ccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r?cPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705W>cMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
` + ` G Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298F %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240E +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*D KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240#C =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
A
h A #L =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233K Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"JGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987aIccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rHcPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
R -Q QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148P Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298O %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240N +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*M KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
r 'UQJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
T Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213+SYJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\@- Ignore the modification time when doing RPM verification of /boot/efi files
Resolves: rhbz#1496952JRJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\+@- Prevent errors from diskfilter scan of removable drives
Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
Resolves: rhbz#1614259
v &Q v WXcMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QWcAPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311VV/Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
)
) +] KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$\ =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233"[GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987aZccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rYcPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
a2 gcw[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zbyRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.a QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148` Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298_ %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240^ +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240
eU #h =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233g Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"fGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987geyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733dy7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733
e r+V: e DF
53f42f617e8184218d75676860dfcd10bd810905d61d6d241b88ff372c208b42DE
3704909dce1c80a6e3fa47ea59c51797dbe73c34511a242cf1e0756e078fba23DD
d9821c48f2918944061117f3ab8c87a78a29d2649124aeb7f47f886ec7903dd6DC
251baa632d0d33e46681b76fba3f93cc9ea07b9084a6dbc7bb018c50a1abb9b1DB
13c2180392f13ede0d3e45cf8895eb123d78ede2ff65fcaf4c05232a7cba595bDA
dfe598bbcefc64fd6bb542cf6d1966fef6a3995e68fa2b6cc2ed34220ca65ee8D@
c0e72c1dbf2c72f272577dc891736d1403dd928b5e9f236721ea261f99677b61D?
1e1c43fd5f02a819df67f4ea70bbc1d3725d96664de7ae2da966f9456b5ececfD>
dfcf30fce1599be0699955042c34db80273d1dc14cc38af5a8f91b02ab70060bD=
40778cececacdc153601f3e0bdde3c295376d9e7a17eef328a28fd1f1d7e2f2eD<
c67c4c4063b74aae72efd079229bf2ca2167a39844fe319e3e726d3df81c4767D;
764b6da4f9a89bd034bdb5f3c7e3d13f7fcd081d64b01ef179ecd51b31ec0e20D:
82d9617a439490782837e05a5e05310b0748f064a0556d264fbc615afd85671b
Z R Z ynwRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860-m QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148l Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298k %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240j +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240*i KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
o! s %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240r +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240+q KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240$p =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233fou[Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB- Bump for signing
- Resolves: #1892860
3 m>9 3 z %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240gyyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733xy7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733gww[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860zvyRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.u QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148t Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
E m>9 E wNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460g yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct- Bump sbat
- Resolves: CVE-2022-28733y7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733g~w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB- Bump for signing
- Resolves: #1892860z}yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(- Fix accidental reboot in grub_exit
- Resolves: #1892860.| QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148{ Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298
'QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213kwcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e- Rebuild for signing
- Related: RHEL-23460~wNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e6@- safemath: add grub_cast for gcc < 5.1
- Related: RHEL-23460
v &Q v WcMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311QcAPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V/Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
A
h A #
=Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240" GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a
ccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r cPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
%/% Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987accPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rcPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705WcMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
` + ` Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240* KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240# =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
A
h A # =Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8- Fix another batch of CVEs
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_ - Fix keyboards that report IBM PC AT scan codes
Resolves: rhbz#1892240"GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987accPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705rcPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
R -! QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`Z- Fix boot failures in ppc64le caused by storage race condition (diegodo)
Resolves: rhbz#1942148 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo)
Resolves: rhbz#1759298 %Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@- Add the at keyboard patches that weren't included
Resolves: rhbz#1892240 +Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@- add keylayouts and at_keyboard modules to EFI binary
Resolves: rhbz#1892240* KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
Resolves: rhbz#1892240
r '%QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
Resolves: rhbz#1748019
$ Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\e- Rebuild with correct build target for signing
Resolves: rhbz#1693213+#YJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\@- Ignore the modification time when doing RPM verification of /boot/efi files
Resolves: rhbz#1496952J"Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\+@- Prevent errors from diskfilter scan of removable drives
Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
Resolves: rhbz#1614259
v &Q v W(cMPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311Q'cAPeter Jones <pjones@redhat.com> - 2.02-0.83_@- Fix several CVEs:
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311V&/Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
Resolves: rhbz#1732765
#
# l/guRobbie Harwood <rharwood@redhat.com> 0.7.0-24\@- Add a safety timeout to epoll
- Resolves: #1687899y.g
Robbie Harwood <rharwood@redhat.com> 0.7.0-23\- Use pthread keys for thread local storage
- Resolves: #1618375q-gRobbie Harwood <rharwood@redhat.com> 0.7.0-22\- Add hack to support read-only root
- Resolves: #1542567{,gRobbie Harwood <rharwood@redhat.com> 0.7.0-21[o- Always choose highest requested debug level
- Resolves: #1505741"+GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
Resolves: rhbz#1869987a*ccPeter Jones <pjones@redhat.com> - 2.02-0.86_ - Fix a mis-merge
Related: CVE-2020-15705r)cPeter Jones <pjones@redhat.com> - 2.02-0.85_ - Couple more late fixes.
Resolves: CVE-2020-10713
Resolves: CVE-2020-14308
Resolves: CVE-2020-14309
Resolves: CVE-2020-14310
Resolves: CVE-2020-14311
Resolves: CVE-2020-15705
I ur I Q7g?Colin Walters <walters@verbum.org> 0.10.23-16QU@- Drop PyXML BR (#914060)N6i7Bastien Nocera <bnocera@redhat.com> 0.10.23-15Q8@- Remove gmyth plugin 5gRobbie Harwood <rharwood@redhat.com> 0.7.0-30`Z- Always free ciphertext data in gp_encrypt_buffer
- Resolves: #1887438w4g Robbie Harwood <rharwood@redhat.com> 0.7.0-29^- Make syslog of call status configurable
- Resolves: #13734213g%Robbie Harwood <rharwood@redhat.com> 0.7.0-28]m- Fix double free of popt context when querying version
- Resolves: #17528102g+Robbie Harwood <rharwood@redhat.com> 0.7.0-27]5@- Update docs to reflect actual behavior of krb5_principal
- Resolves: #1553094 1gRobbie Harwood <rharwood@redhat.com> 0.7.0-26\Ɋ@- Avoid uninitialized free when allocating buffers
- Resolves: #1699331x0g Robbie Harwood <rharwood@redhat.com> 0.7.0-25\8- Fix explicit NULL deref on some enctypes
- Resolves: #1699331
^ Kfn ^ i>imWim Taymans <wtaymans@redhat.com> - 0.10.23-23X- Rebuild with hardened flags
Resolves: #1420764 =iYWim Taymans <wtaymans@redhat.com> - 0.10.23-22XG- h264parse: Ensure codec_data has the required size when reading number of SPS
Resolves: rhbz#1400839"<i]Wim Taymans <wtaymans@redhat.com> - 0.10.23-21XF@- Remove insecure NSF plugin
- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400839O;c?Daniel Mach <dmach@redhat.com> - 0.10.23-20RU- Mass rebuild 2014-01-24O:c?Daniel Mach <dmach@redhat.com> - 0.10.23-19Rk- Mass rebuild 2013-12-279g9Colin Walters <walters@verbum.org> 0.10.23-18Q@- Move soundtouch-devel BR to outside RHEL conditional, since
it is available there.18g}Colin Walters <walters@verbum.org> 0.10.23-17QUA- Hack the gtk-doc to remove plugin docs that are not shipped
- Drop mythtv, opencv sources that are no longer buildable
Vi "Fi]Wim Taymans <wtaymans@redhat.com> - 0.10.23-21XF@- Remove insecure NSF plugin
- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400839OEc?Daniel Mach <dmach@redhat.com> - 0.10.23-20RU- Mass rebuild 2014-01-24ODc?Daniel Mach <dmach@redhat.com> - 0.10.23-19Rk- Mass rebuild 2013-12-27Cg9Colin Walters <walters@verbum.org> 0.10.23-18Q@- Move soundtouch-devel BR to outside RHEL conditional, since
it is available there.1Bg}Colin Walters <walters@verbum.org> 0.10.23-17QUA- Hack the gtk-doc to remove plugin docs that are not shipped
- Drop mythtv, opencv sources that are no longer buildableQAg?Colin Walters <walters@verbum.org> 0.10.23-16QU@- Drop PyXML BR (#914060)N@i7Bastien Nocera <bnocera@redhat.com> 0.10.23-15Q8@- Remove gmyth plugin&?ieWim Taymans <wtaymans@redhat.com> - 0.10.23-24ey- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix the build
- Resolves: RHEL-16792
Y \F Y Mg9Colin Walters <walters@verbum.org> 0.10.23-18Q@- Move soundtouch-devel BR to outside RHEL conditional, since
it is available there.1Lg}Colin Walters <walters@verbum.org> 0.10.23-17QUA- Hack the gtk-doc to remove plugin docs that are not shipped
- Drop mythtv, opencv sources that are no longer buildableQKg?Colin Walters <walters@verbum.org> 0.10.23-16QU@- Drop PyXML BR (#914060)NJi7Bastien Nocera <bnocera@redhat.com> 0.10.23-15Q8@- Remove gmyth plugin&IieWim Taymans <wtaymans@redhat.com> - 0.10.23-24ey- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix the build
- Resolves: RHEL-16792iHimWim Taymans <wtaymans@redhat.com> - 0.10.23-23X- Rebuild with hardened flags
Resolves: #1420764 GiYWim Taymans <wtaymans@redhat.com> - 0.10.23-22XG- h264parse: Ensure codec_data has the required size when reading number of SPS
Resolves: rhbz#1400839
W \ W QUg?Colin Walters <walters@verbum.org> 0.10.23-16QU@- Drop PyXML BR (#914060)NTi7Bastien Nocera <bnocera@redhat.com> 0.10.23-15Q8@- Remove gmyth plugin&SieWim Taymans <wtaymans@redhat.com> - 0.10.23-24ey- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix the build
- Resolves: RHEL-16792iRimWim Taymans <wtaymans@redhat.com> - 0.10.23-23X- Rebuild with hardened flags
Resolves: #1420764 QiYWim Taymans <wtaymans@redhat.com> - 0.10.23-22XG- h264parse: Ensure codec_data has the required size when reading number of SPS
Resolves: rhbz#1400839"Pi]Wim Taymans <wtaymans@redhat.com> - 0.10.23-21XF@- Remove insecure NSF plugin
- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400839OOc?Daniel Mach <dmach@redhat.com> - 0.10.23-20RU- Mass rebuild 2014-01-24ONc?Daniel Mach <dmach@redhat.com> - 0.10.23-19Rk- Mass rebuild 2013-12-27
^ Kfn ^ i\imWim Taymans <wtaymans@redhat.com> - 0.10.23-23X- Rebuild with hardened flags
Resolves: #1420764 [iYWim Taymans <wtaymans@redhat.com> - 0.10.23-22XG- h264parse: Ensure codec_data has the required size when reading number of SPS
Resolves: rhbz#1400839"Zi]Wim Taymans <wtaymans@redhat.com> - 0.10.23-21XF@- Remove insecure NSF plugin
- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400839OYc?Daniel Mach <dmach@redhat.com> - 0.10.23-20RU- Mass rebuild 2014-01-24OXc?Daniel Mach <dmach@redhat.com> - 0.10.23-19Rk- Mass rebuild 2013-12-27Wg9Colin Walters <walters@verbum.org> 0.10.23-18Q@- Move soundtouch-devel BR to outside RHEL conditional, since
it is available there.1Vg}Colin Walters <walters@verbum.org> 0.10.23-17QUA- Hack the gtk-doc to remove plugin docs that are not shipped
- Drop mythtv, opencv sources that are no longer buildable
Vi "di]Wim Taymans <wtaymans@redhat.com> - 0.10.23-21XF@- Remove insecure NSF plugin
- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400839Occ?Daniel Mach <dmach@redhat.com> - 0.10.23-20RU- Mass rebuild 2014-01-24Obc?Daniel Mach <dmach@redhat.com> - 0.10.23-19Rk- Mass rebuild 2013-12-27ag9Colin Walters <walters@verbum.org> 0.10.23-18Q@- Move soundtouch-devel BR to outside RHEL conditional, since
it is available there.1`g}Colin Walters <walters@verbum.org> 0.10.23-17QUA- Hack the gtk-doc to remove plugin docs that are not shipped
- Drop mythtv, opencv sources that are no longer buildableQ_g?Colin Walters <walters@verbum.org> 0.10.23-16QU@- Drop PyXML BR (#914060)N^i7Bastien Nocera <bnocera@redhat.com> 0.10.23-15Q8@- Remove gmyth plugin&]ieWim Taymans <wtaymans@redhat.com> - 0.10.23-24ey- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix the build
- Resolves: RHEL-16792
\F ikcsWim Taymans <wtaymans@redhat.com> - 1.4.5-4WF@- rebuild for libdvdnav update
- Resolves: #1340047 jc7Wim Taymans <wtaymans@redhat.com> - 1.4.5-3U- Update audiomixer unit test for big endian
- add missing patch
- Resolves: #1226909cicgWim Taymans <wtaymans@redhat.com> - 1.4.5-2U- Update ORC backup file
- Resolves: #1174403\hcYWim Taymans <wtaymans@redhat.com> - 1.4.5-1UQ@- Update to 1.4.5
- Resolves: #1174403&gieWim Taymans <wtaymans@redhat.com> - 0.10.23-24ey- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix the build
- Resolves: RHEL-16792ifimWim Taymans <wtaymans@redhat.com> - 0.10.23-23X- Rebuild with hardened flags
Resolves: #1420764 eiYWim Taymans <wtaymans@redhat.com> - 0.10.23-22XG- h264parse: Ensure codec_data has the required size when reading number of SPS
Resolves: rhbz#1400839
e r+V: e DS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 zU| y \rcYWim Taymans <wtaymans@redhat.com> - 1.4.5-1UQ@- Update to 1.4.5
- Resolves: #1174403 qe]Wim Taymans <wtaymans@redhat.com> - 1.10.4-4ey- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix build
- Resolves: RHEL-16793ipeqWim Taymans <wtaymans@redhat.com> - 1.10.4-3Yd- Disable wayland sink plugin
- Resolves: #1488978joesWim Taymans <wtaymans@redhat.com> - 1.10.4-2XC- Disable plugins
- Fix origin
- Resolves: #1429587xne
Wim Taymans <wtaymans@redhat.com> - 1.10.4-1XO@- Update to 1.10.4
- Remove unbuilt plugins
- Resolves: #1429587&mckWim Taymans <wtaymans@redhat.com> - 1.4.5-6XG- Fix h264 and h265 buffer size checks
- Fix mpegts pat parsing and add more size checks
Resolves: rhbz#1400898lc#Wim Taymans <wtaymans@redhat.com> - 1.4.5-5XF@- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400898
n izeqWim Taymans <wtaymans@redhat.com> - 1.10.4-3Yd- Disable wayland sink plugin
- Resolves: #1488978jyesWim Taymans <wtaymans@redhat.com> - 1.10.4-2XC- Disable plugins
- Fix origin
- Resolves: #1429587xxe
Wim Taymans <wtaymans@redhat.com> - 1.10.4-1XO@- Update to 1.10.4
- Remove unbuilt plugins
- Resolves: #1429587&wckWim Taymans <wtaymans@redhat.com> - 1.4.5-6XG- Fix h264 and h265 buffer size checks
- Fix mpegts pat parsing and add more size checks
Resolves: rhbz#1400898vc#Wim Taymans <wtaymans@redhat.com> - 1.4.5-5XF@- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400898iucsWim Taymans <wtaymans@redhat.com> - 1.4.5-4WF@- rebuild for libdvdnav update
- Resolves: #1340047 tc7Wim Taymans <wtaymans@redhat.com> - 1.4.5-3U- Update audiomixer unit test for big endian
- add missing patch
- Resolves: #1226909cscgWim Taymans <wtaymans@redhat.com> - 1.4.5-2U- Update ORC backup file
- Resolves: #1174403
k \ k &ckWim Taymans <wtaymans@redhat.com> - 1.4.5-6XG- Fix h264 and h265 buffer size checks
- Fix mpegts pat parsing and add more size checks
Resolves: rhbz#1400898 c#Wim Taymans <wtaymans@redhat.com> - 1.4.5-5XF@- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400898icsWim Taymans <wtaymans@redhat.com> - 1.4.5-4WF@- rebuild for libdvdnav update
- Resolves: #1340047 ~c7Wim Taymans <wtaymans@redhat.com> - 1.4.5-3U- Update audiomixer unit test for big endian
- add missing patch
- Resolves: #1226909c}cgWim Taymans <wtaymans@redhat.com> - 1.4.5-2U- Update ORC backup file
- Resolves: #1174403\|cYWim Taymans <wtaymans@redhat.com> - 1.4.5-1UQ@- Update to 1.4.5
- Resolves: #1174403 {e]Wim Taymans <wtaymans@redhat.com> - 1.10.4-4ey- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix build
- Resolves: RHEL-16793
G C G i csWim Taymans <wtaymans@redhat.com> - 1.4.5-4WF@- rebuild for libdvdnav update
- Resolves: #1340047 c7Wim Taymans <wtaymans@redhat.com> - 1.4.5-3U- Update audiomixer unit test for big endian
- add missing patch
- Resolves: #1226909ccgWim Taymans <wtaymans@redhat.com> - 1.4.5-2U- Update ORC backup file
- Resolves: #1174403\cYWim Taymans <wtaymans@redhat.com> - 1.4.5-1UQ@- Update to 1.4.5
- Resolves: #1174403 e]Wim Taymans <wtaymans@redhat.com> - 1.10.4-4ey- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix build
- Resolves: RHEL-16793ieqWim Taymans <wtaymans@redhat.com> - 1.10.4-3Yd- Disable wayland sink plugin
- Resolves: #1488978jesWim Taymans <wtaymans@redhat.com> - 1.10.4-2XC- Disable plugins
- Fix origin
- Resolves: #1429587xe
Wim Taymans <wtaymans@redhat.com> - 1.10.4-1XO@- Update to 1.10.4
- Remove unbuilt plugins
- Resolves: #1429587
y zU| y \cYWim Taymans <wtaymans@redhat.com> - 1.4.5-1UQ@- Update to 1.4.5
- Resolves: #1174403 e]Wim Taymans <wtaymans@redhat.com> - 1.10.4-4ey- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix build
- Resolves: RHEL-16793ieqWim Taymans <wtaymans@redhat.com> - 1.10.4-3Yd- Disable wayland sink plugin
- Resolves: #1488978j
esWim Taymans <wtaymans@redhat.com> - 1.10.4-2XC- Disable plugins
- Fix origin
- Resolves: #1429587x e
Wim Taymans <wtaymans@redhat.com> - 1.10.4-1XO@- Update to 1.10.4
- Remove unbuilt plugins
- Resolves: #1429587& ckWim Taymans <wtaymans@redhat.com> - 1.4.5-6XG- Fix h264 and h265 buffer size checks
- Fix mpegts pat parsing and add more size checks
Resolves: rhbz#1400898
c#Wim Taymans <wtaymans@redhat.com> - 1.4.5-5XF@- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400898
n ieqWim Taymans <wtaymans@redhat.com> - 1.10.4-3Yd- Disable wayland sink plugin
- Resolves: #1488978jesWim Taymans <wtaymans@redhat.com> - 1.10.4-2XC- Disable plugins
- Fix origin
- Resolves: #1429587xe
Wim Taymans <wtaymans@redhat.com> - 1.10.4-1XO@- Update to 1.10.4
- Remove unbuilt plugins
- Resolves: #1429587&ckWim Taymans <wtaymans@redhat.com> - 1.4.5-6XG- Fix h264 and h265 buffer size checks
- Fix mpegts pat parsing and add more size checks
Resolves: rhbz#1400898c#Wim Taymans <wtaymans@redhat.com> - 1.4.5-5XF@- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400898icsWim Taymans <wtaymans@redhat.com> - 1.4.5-4WF@- rebuild for libdvdnav update
- Resolves: #1340047 c7Wim Taymans <wtaymans@redhat.com> - 1.4.5-3U- Update audiomixer unit test for big endian
- add missing patch
- Resolves: #1226909ccgWim Taymans <wtaymans@redhat.com> - 1.4.5-2U- Update ORC backup file
- Resolves: #1174403
k \ k & ckWim Taymans <wtaymans@redhat.com> - 1.4.5-6XG- Fix h264 and h265 buffer size checks
- Fix mpegts pat parsing and add more size checks
Resolves: rhbz#1400898 c#Wim Taymans <wtaymans@redhat.com> - 1.4.5-5XF@- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400898i csWim Taymans <wtaymans@redhat.com> - 1.4.5-4WF@- rebuild for libdvdnav update
- Resolves: #1340047 c7Wim Taymans <wtaymans@redhat.com> - 1.4.5-3U- Update audiomixer unit test for big endian
- add missing patch
- Resolves: #1226909ccgWim Taymans <wtaymans@redhat.com> - 1.4.5-2U- Update ORC backup file
- Resolves: #1174403\cYWim Taymans <wtaymans@redhat.com> - 1.4.5-1UQ@- Update to 1.4.5
- Resolves: #1174403 e]Wim Taymans <wtaymans@redhat.com> - 1.10.4-4ey- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix build
- Resolves: RHEL-16793
L L b'ceRay Strode <rstrode@redhat.com> - 3.22.30-6_P- Fix leak on VT switch
Resolves: #1882574c&_kDavid King <dking@redhat.com> - 3.22.30-8b - Further treeview a11y refcount fix (#1965195)%_3David King <dking@redhat.com> - 3.22.30-7aZ@- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)b$ceRay Strode <rstrode@redhat.com> - 3.22.30-6_P- Fix leak on VT switch
Resolves: #1882574 #e]Wim Taymans <wtaymans@redhat.com> - 1.10.4-4ey- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix build
- Resolves: RHEL-16793i"eqWim Taymans <wtaymans@redhat.com> - 1.10.4-3Yd- Disable wayland sink plugin
- Resolves: #1488978j!esWim Taymans <wtaymans@redhat.com> - 1.10.4-2XC- Disable plugins
- Fix origin
- Resolves: #1429587x e
Wim Taymans <wtaymans@redhat.com> - 1.10.4-1XO@- Update to 1.10.4
- Remove unbuilt plugins
- Resolves: #1429587
a R a /_3David King <dking@redhat.com> - 3.22.30-7aZ@- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)b.ceRay Strode <rstrode@redhat.com> - 3.22.30-6_P- Fix leak on VT switch
Resolves: #1882574b-ceRay Strode <rstrode@redhat.com> - 3.22.30-6_P- Fix leak on VT switch
Resolves: #1882574c,_kDavid King <dking@redhat.com> - 3.22.30-8b - Further treeview a11y refcount fix (#1965195)+_3David King <dking@redhat.com> - 3.22.30-7aZ@- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)c*_kDavid King <dking@redhat.com> - 3.22.30-8b - Further treeview a11y refcount fix (#1965195))_3David King <dking@redhat.com> - 3.22.30-7aZ@- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)b(ceRay Strode <rstrode@redhat.com> - 3.22.30-6_P- Fix leak on VT switch
Resolves: #1882574
e r+V: e D`
d5da28b2cc382844aa578c0eb19c23535d011518b699a177d00f377554f5c80aD_
86993bde440204eca01ab08264c50ea2e67b216b8b0460a9abd7ed1e48864926D^
835e86766eabc1d9ae0e8b151d9721a415b5dfdc6b9dc31497b790dc7f51e60dD]
aaa642c4d8ab309bd427dfe250bcf2154390e1fe39eeec98c816058e6da39c2fD\
42f1179fa155a1a3b4448c2b7429ab632d2e5b7216612cb0f5458e96d9c9e738D[
a20718245cbc3ce096de1da99acc9aadce7082881bcdc0b1576352b2959e8db8DZ
fbfc27e8e45f88c94b069c77e301bd007e2e4c2d7e71b268fcaa0c9bee8f84a6DY
dee28e194d7127f17697a1e4475e1ffb525b9887c34d90564152f147605360acDX
c697cda85543d0498850f1a43781d8a7a9027a93e2d04cb19345ead2d9caab5cDW
f7c28e4b2e40bd7978b5bd740987494914a4fb3430ca45bea2cc9a5f94c01b50DV
4459ade066985609ab1ac51574d24bb466645a717a2ff3a30e417a8b91609a87DU
4c591b2e577a321d2a3be5e390eecceec9fe2e18c4d4f269ef41f4ecb0ef6c0cDT
052c8eb21db8776433111192ff5a74c5160dfebb1bfcc701324165599256b321
` CQ ` 7_3David King <dking@redhat.com> - 3.22.30-7aZ@- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)b6ceRay Strode <rstrode@redhat.com> - 3.22.30-6_P- Fix leak on VT switch
Resolves: #1882574c5_kDavid King <dking@redhat.com> - 3.22.30-8b - Further treeview a11y refcount fix (#1965195)4_3David King <dking@redhat.com> - 3.22.30-7aZ@- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)b3ceRay Strode <rstrode@redhat.com> - 3.22.30-6_P- Fix leak on VT switch
Resolves: #1882574c2_kDavid King <dking@redhat.com> - 3.22.30-8b - Further treeview a11y refcount fix (#1965195)1_3David King <dking@redhat.com> - 3.22.30-7aZ@- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)c0_kDavid King <dking@redhat.com> - 3.22.30-8b - Further treeview a11y refcount fix (#1965195)
5CR V?y7Peter Robinson <pbrobinson@fedoraproject.org> 0.20.0-2Q& @- Obsolete gupnp-valac>_kDavid King <dking@redhat.com> - 3.22.30-8b - Further treeview a11y refcount fix (#1965195)=_3David King <dking@redhat.com> - 3.22.30-7aZ@- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)b<ceRay Strode <rstrode@redhat.com> - 3.22.30-6_P- Fix leak on VT switch
Resolves: #1882574c;_kDavid King <dking@redhat.com> - 3.22.30-8b - Further treeview a11y refcount fix (#1965195):_3David King <dking@redhat.com> - 3.22.30-7aZ@- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)b9ceRay Strode <rstrode@redhat.com> - 3.22.30-6_P- Fix leak on VT switch
Resolves: #1882574c8_kDavid King <dking@redhat.com> - 3.22.30-8b - Further treeview a11y refcount fix (#1965195)
& d, & pGg}Richard Hughes <rhughes@redhat.com> - 1.0.2-5[)+ Update to latest upstream version
- Resolves: #1569980lFguBastien Nocera <bnocera@redhat.com> - 1.0.1-1X @+ gupnp-1.0.1-1
- Rebase to 1.0.1
Resolves: #1386985 EqDebarshi Ray <rishi@fedoraproject.org> - 0.20.13-1UlI@- Update to 0.20.13 and re-enable vala bindings
Resolves: #1225451MD_?Daniel Mach <dmach@redhat.com> - 0.20.3-3RU- Mass rebuild 2014-01-24MC_?Daniel Mach <dmach@redhat.com> - 0.20.3-2Rk- Mass rebuild 2013-12-27By9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.3-1Q?@- 0.20.3 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.newsAy9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.2-1QiH- 0.20.2 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news@y9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.1-1Q5@- 0.20.1 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.news
8 0\ 8 OqDebarshi Ray <rishi@fedoraproject.org> - 0.20.13-1UlI@- Update to 0.20.13 and re-enable vala bindings
Resolves: #1225451MN_?Daniel Mach <dmach@redhat.com> - 0.20.3-3RU- Mass rebuild 2014-01-24MM_?Daniel Mach <dmach@redhat.com> - 0.20.3-2Rk- Mass rebuild 2013-12-27Ly9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.3-1Q?@- 0.20.3 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.newsKy9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.2-1QiH- 0.20.2 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.newsJy9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.1-1Q5@- 0.20.1 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.newsVIy7Peter Robinson <pbrobinson@fedoraproject.org> 0.20.0-2Q& @- Obsolete gupnp-valatHgBastien Nocera <bnocera@redhat.com> - 1.0.2-6`[+ gupnp-1.0.3-3
- Fix DNS rebind issue
- Resolves: #1964706
* N z * MW_?Daniel Mach <dmach@redhat.com> - 0.20.3-2Rk- Mass rebuild 2013-12-27Vy9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.3-1Q?@- 0.20.3 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.newsUy9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.2-1QiH- 0.20.2 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.newsTy9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.1-1Q5@- 0.20.1 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.newsVSy7Peter Robinson <pbrobinson@fedoraproject.org> 0.20.0-2Q& @- Obsolete gupnp-valatRgBastien Nocera <bnocera@redhat.com> - 1.0.2-6`[+ gupnp-1.0.3-3
- Fix DNS rebind issue
- Resolves: #1964706pQg}Richard Hughes <rhughes@redhat.com> - 1.0.2-5[)+ Update to latest upstream version
- Resolves: #1569980lPguBastien Nocera <bnocera@redhat.com> - 1.0.1-1X @+ gupnp-1.0.1-1
- Rebase to 1.0.1
Resolves: #1386985
e r+V: e Dm
8fbe338dd8adc0ef568214985a4b86d964a490b7b5eb963f88ed406169b64c43Dl
35f5c229e131ffb525fc38628dbe4dc399fd7f6077f047e169dc8e5ddcce20e8Dk
9f51218b8454129029c134ac7b8c3cfdae6f1bd1938cb010314534defd013717Dj
cce9b9d8e55d003cd7be906f5603d626c0f14b8e422e5123076eb85b9dab7694Di
b716a9548efd53a938625df1910ca436cae1cbf92940422987c01ae7cbb040e3Dh
dc73b498dea020241c15f040008e6f96731b9a67cfa83b452c60a9d4510edd41Dg
dacb7b788cec2e57fc23d0ff804942ec81a7a415eee8eca5a9a61540c86d896aDf
4634b74cfe7dbc9b83774cbbc50314221241227045a9199072df357ddda72bf3De
28f3ff68224de0783083894b44eefc57e4833a53461ce91f1f4656bbc1b0eb9fDd
717c6856842ddb6b4eca2817cbb3adfce002d371a61b322c8c74761e57ae5bcfDc
bc77febf9b5e706cc4d68361638309818761fa19dfe82ca91496f40a23d81bacDb
ecb7f8d19fb659a35a4a25d22a891cfd89fd55cc12d791df222c33eba1c9dbdbDa
160346449f601718afb8de2d7f7e0aeb2ac8a5f4e2163d2f74d1b98233db4002
B ,Jz B _y9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.2-1QiH- 0.20.2 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news^y9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.1-1Q5@- 0.20.1 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.newsV]y7Peter Robinson <pbrobinson@fedoraproject.org> 0.20.0-2Q& @- Obsolete gupnp-valat\gBastien Nocera <bnocera@redhat.com> - 1.0.2-6`[+ gupnp-1.0.3-3
- Fix DNS rebind issue
- Resolves: #1964706p[g}Richard Hughes <rhughes@redhat.com> - 1.0.2-5[)+ Update to latest upstream version
- Resolves: #1569980lZguBastien Nocera <bnocera@redhat.com> - 1.0.1-1X @+ gupnp-1.0.1-1
- Rebase to 1.0.1
Resolves: #1386985 YqDebarshi Ray <rishi@fedoraproject.org> - 0.20.13-1UlI@- Update to 0.20.13 and re-enable vala bindings
Resolves: #1225451MX_?Daniel Mach <dmach@redhat.com> - 0.20.3-3RU- Mass rebuild 2014-01-24
d@^ Vgy7Peter Robinson <pbrobinson@fedoraproject.org> 0.20.0-2Q& @- Obsolete gupnp-valatfgBastien Nocera <bnocera@redhat.com> - 1.0.2-6`[+ gupnp-1.0.3-3
- Fix DNS rebind issue
- Resolves: #1964706peg}Richard Hughes <rhughes@redhat.com> - 1.0.2-5[)+ Update to latest upstream version
- Resolves: #1569980ldguBastien Nocera <bnocera@redhat.com> - 1.0.1-1X @+ gupnp-1.0.1-1
- Rebase to 1.0.1
Resolves: #1386985 cqDebarshi Ray <rishi@fedoraproject.org> - 0.20.13-1UlI@- Update to 0.20.13 and re-enable vala bindings
Resolves: #1225451Mb_?Daniel Mach <dmach@redhat.com> - 0.20.3-3RU- Mass rebuild 2014-01-24Ma_?Daniel Mach <dmach@redhat.com> - 0.20.3-2Rk- Mass rebuild 2013-12-27`y9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.3-1Q?@- 0.20.3 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news
& d, & pog}Richard Hughes <rhughes@redhat.com> - 1.0.2-5[)+ Update to latest upstream version
- Resolves: #1569980lnguBastien Nocera <bnocera@redhat.com> - 1.0.1-1X @+ gupnp-1.0.1-1
- Rebase to 1.0.1
Resolves: #1386985 mqDebarshi Ray <rishi@fedoraproject.org> - 0.20.13-1UlI@- Update to 0.20.13 and re-enable vala bindings
Resolves: #1225451Ml_?Daniel Mach <dmach@redhat.com> - 0.20.3-3RU- Mass rebuild 2014-01-24Mk_?Daniel Mach <dmach@redhat.com> - 0.20.3-2Rk- Mass rebuild 2013-12-27jy9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.3-1Q?@- 0.20.3 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.newsiy9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.2-1QiH- 0.20.2 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.newshy9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.1-1Q5@- 0.20.1 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.news
5 +Kl 5 Rw_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^ve[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268xu_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)at_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)is_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256qr_Ondrej Holy <oholy@redhat.com> - 1.30.4-2XPA- Add explicit gvfs-client requirements
- Resolves: #1386993[q_[Ondrej Holy <oholy@redhat.com> - 1.30.4-1XP@- Update to 1.30.4
- Resolves: #1386993tpgBastien Nocera <bnocera@redhat.com> - 1.0.2-6`[+ gupnp-1.0.3-3
- Fix DNS rebind issue
- Resolves: #1964706
& Ff & ^ e[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268x_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)a~_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)i}_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256q|_Ondrej Holy <oholy@redhat.com> - 1.30.4-2XPA- Add explicit gvfs-client requirements
- Resolves: #1386993[{_[Ondrej Holy <oholy@redhat.com> - 1.30.4-1XP@- Update to 1.30.4
- Resolves: #1386993ez_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|y_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)rx_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)
" *6b " ^e[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268x_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)a_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)i_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256e_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)
1 *6X 1 a_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)i_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256T_MOndrej Holy <oholy@redhat.com> - 1.36.2-7bU- Fix unapplied patch (#2093816)s
_ Ondrej Holy <oholy@redhat.com> - 1.36.2-6bx@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e _oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)| _Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r
_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R _GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)
% $NZ | % T_MOndrej Holy <oholy@redhat.com> - 1.36.2-7bU- Fix unapplied patch (#2093816)s_ Ondrej Holy <oholy@redhat.com> - 1.36.2-6bx@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^e[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268x_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)
7 .^ 7 r _Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R _GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^ e[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268x _Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)a _gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)i_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256q_Ondrej Holy <oholy@redhat.com> - 1.30.4-2XPA- Add explicit gvfs-client requirements
- Resolves: #1386993[_[Ondrej Holy <oholy@redhat.com> - 1.30.4-1XP@- Update to 1.30.4
- Resolves: #1386993
" Im " r(_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R'_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^&e[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268x%_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)a$_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)i#_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256e"_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|!_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)
/ Lz / x1_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)a0_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)i/_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256q._Ondrej Holy <oholy@redhat.com> - 1.30.4-2XPA- Add explicit gvfs-client requirements
- Resolves: #1386993[-_[Ondrej Holy <oholy@redhat.com> - 1.30.4-1XP@- Update to 1.30.4
- Resolves: #1386993T,_MOndrej Holy <oholy@redhat.com> - 1.36.2-7bU- Fix unapplied patch (#2093816)s+_ Ondrej Holy <oholy@redhat.com> - 1.36.2-6bx@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e*_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|)_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)
" Tm " x9_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)a8_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)i7_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256e6_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|5_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r4_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R3_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^2e[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268
B Tm B [A_[Ondrej Holy <oholy@redhat.com> - 1.30.4-1XP@- Update to 1.30.4
- Resolves: #1386993T@_MOndrej Holy <oholy@redhat.com> - 1.36.2-7bU- Fix unapplied patch (#2093816)s?_ Ondrej Holy <oholy@redhat.com> - 1.36.2-6bx@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e>_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|=_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r<_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R;_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^:e[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268
A
rH_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)RG_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^Fe[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268xE_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)aD_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)iC_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256qB_Ondrej Holy <oholy@redhat.com> - 1.30.4-2XPA- Add explicit gvfs-client requirements
- Resolves: #1386993
" Im " rP_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)RO_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^Ne[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268xM_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)aL_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)iK_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256eJ_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|I_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)
/ Lz / xY_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)aX_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)iW_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256qV_Ondrej Holy <oholy@redhat.com> - 1.30.4-2XPA- Add explicit gvfs-client requirements
- Resolves: #1386993[U_[Ondrej Holy <oholy@redhat.com> - 1.30.4-1XP@- Update to 1.30.4
- Resolves: #1386993TT_MOndrej Holy <oholy@redhat.com> - 1.36.2-7bU- Fix unapplied patch (#2093816)sS_ Ondrej Holy <oholy@redhat.com> - 1.36.2-6bx@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)eR_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|Q_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)
e r+V: e Dz
cc2af8b460ae945f1afdf5f03ea0b48e40aa3372a33d96e0408d1256c8c0294eDy
a0b60429c7fcd5fba41b9a28504facb63c1539487333911e73e7e2b166b38981Dx
96f852d003908ae51e7c33a2d18e329760dd559b5ca3c8a594e3d2a5ebf41ce5Dw
2590f93594e0978b11599b182212244c231fcb0808dff97b691b518fbd531adaDv
72fedcf3bf921b3e8efb6e27a94cc4edfe624334e5b7a143442d707cfb625b06Du
93d59adb2af4416388006f622bdf8c0f758944b16c04ac683b05b66a90cd48c7Dt
527d093e43a30a0f0ec3101a8926eeba2b14e4496c495e70a1d5a3ceca45adbdDs
34a08308f948f94b0ad18d9d233e22453d984465c89a58935ec1185d071e7f4dDr
0b42148789300af59e74814b7d8cb50a3c1453dc197a498f2f37cdc75a6a97d7Dq
8453856c66fc79e7ec946e471ab4cddd8112886e40b99a72093c616592b2258fDp
938d5007ce1dff2b3235913a2a5efe8141b51ff690ea6d5b59b6289df55ab4f8Do
b95af4b262010256013a4265ab61dfb37bf37e1d4ca12de8b007b315ae8a9b1cDn
51af7b29f1554b6ee4cfc1be4f18e91dcb17d8795d87ad960cb26d3fe381cc64
/ Tm / ia_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256q`_Ondrej Holy <oholy@redhat.com> - 1.30.4-2XPA- Add explicit gvfs-client requirements
- Resolves: #1386993[__[Ondrej Holy <oholy@redhat.com> - 1.30.4-1XP@- Update to 1.30.4
- Resolves: #1386993e^_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|]_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r\_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R[_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^Ze[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268
" !u " ii_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256eh_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|g_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)rf_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)Re_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^de[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268xc_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)ab_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)
!u sq_ Ondrej Holy <oholy@redhat.com> - 1.36.2-6bx@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)ep_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|o_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)rn_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)Rm_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^le[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268xk_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)aj_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)
3 =^' 3 |y_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)rx_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)Rw_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^ve[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268xu_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)at_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)is_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256Tr_MOndrej Holy <oholy@redhat.com> - 1.36.2-7bU- Fix unapplied patch (#2093816)
M "m) M ^e[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268x_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)a _gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)i_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256q~_Ondrej Holy <oholy@redhat.com> - 1.30.4-2XPA- Add explicit gvfs-client requirements
- Resolves: #1386993[}_[Ondrej Holy <oholy@redhat.com> - 1.30.4-1XP@- Update to 1.30.4
- Resolves: #1386993T|_MOndrej Holy <oholy@redhat.com> - 1.36.2-7bU- Fix unapplied patch (#2093816)s{_ Ondrej Holy <oholy@redhat.com> - 1.36.2-6bx@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)ez_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)
, *6p , a
_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)i _wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256q_Ondrej Holy <oholy@redhat.com> - 1.30.4-2XPA- Add explicit gvfs-client requirements
- Resolves: #1386993[_[Ondrej Holy <oholy@redhat.com> - 1.30.4-1XP@- Update to 1.30.4
- Resolves: #1386993e_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)
" $NZ " a_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)i_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256e_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R
_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^ e[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268x _Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)
% $NZ | % T_MOndrej Holy <oholy@redhat.com> - 1.36.2-7bU- Fix unapplied patch (#2093816)s_ Ondrej Holy <oholy@redhat.com> - 1.36.2-6bx@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^e[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268x_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)
" 0T~ " e"_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|!_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r _Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R _GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^ e[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268x _Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)a _gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)i_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256
3a ^*e[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268x)_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)a(_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)i'_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256q&_Ondrej Holy <oholy@redhat.com> - 1.30.4-2XPA- Add explicit gvfs-client requirements
- Resolves: #1386993[%_[Ondrej Holy <oholy@redhat.com> - 1.30.4-1XP@- Update to 1.30.4
- Resolves: #1386993T$_MOndrej Holy <oholy@redhat.com> - 1.36.2-7bU- Fix unapplied patch (#2093816)s#_ Ondrej Holy <oholy@redhat.com> - 1.36.2-6bx@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)
" *6b " ^2e[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268x1_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)a0_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)i/_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256e._oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|-_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r,_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R+_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)
/ *6X / q:_Ondrej Holy <oholy@redhat.com> - 1.30.4-2XPA- Add explicit gvfs-client requirements
- Resolves: #1386993[9_[Ondrej Holy <oholy@redhat.com> - 1.30.4-1XP@- Update to 1.30.4
- Resolves: #1386993T8_MOndrej Holy <oholy@redhat.com> - 1.36.2-7bU- Fix unapplied patch (#2093816)s7_ Ondrej Holy <oholy@redhat.com> - 1.36.2-6bx@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e6_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|5_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r4_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R3_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)
" 0T~ " eB_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|A_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r@_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R?_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^>e[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268x=_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)a<_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)i;_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256
" 0T~ " eJ_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|I_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)rH_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)RG_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^Fe[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268xE_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)aD_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)iC_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256
3a ^Re[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268xQ_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)aP_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)iO_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256qN_Ondrej Holy <oholy@redhat.com> - 1.30.4-2XPA- Add explicit gvfs-client requirements
- Resolves: #1386993[M_[Ondrej Holy <oholy@redhat.com> - 1.30.4-1XP@- Update to 1.30.4
- Resolves: #1386993TL_MOndrej Holy <oholy@redhat.com> - 1.36.2-7bU- Fix unapplied patch (#2093816)sK_ Ondrej Holy <oholy@redhat.com> - 1.36.2-6bx@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)
" *6b " ^Ze[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268xY_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)aX_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)iW_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256eV_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|U_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)rT_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)RS_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)
e r+V: e D
ace18d3c4c3acb71a8d4c5a6930f0ae58e655462938d91d3ef45aef7694df479D
79eacef92a2947aefaab902e53fada60dc27d9c173b1e175f1ce4db04d6c653eD
59b2eac344b965618bc03745e27bb5c92278b9fa7c3a6327c3f89fdda6289a54D
eb18e0e118e44349b3d8917b223e6ca7e2331d41d2e49ec2e8a65f091985bfb7D
f94ef4ce18a021edb2b5a72fc87092d88e8c7b4aac3c605213fea20cdeefb002D
a38a894774d443bd314d09acaa9ee6056116e25f757c9e76290fe30450b9ca95D
78de7ead3aa002c4e670d2a6bb86af61059a4efe2b86257958242df65bc50d42D
3cf6225627d15b57e6db240be4821a47a55d2bf482e4fe8f1928862282e7998eD
073a61debf16645920e116641fcf09bdcef80147f54754057c18515f5ebe1f8cD~
09277f1295e2db1f4f90bd3fce359dd8150009233cbba997650480e544b67766D}
474549f2d0c95b83d89f1d651d078459863a9e1f202ab7c4c64e77e2735fab8aD|
b9b11e2c45c327237aea9d0fd84d0d41db9d2a4137822d95f71cedd3ae9145c2D{
858c36d8de6e26caf93ad7dc07224b2b333fcf1617a211b7303e44cdd15a6f3d
/ *6X / qb_Ondrej Holy <oholy@redhat.com> - 1.30.4-2XPA- Add explicit gvfs-client requirements
- Resolves: #1386993[a_[Ondrej Holy <oholy@redhat.com> - 1.30.4-1XP@- Update to 1.30.4
- Resolves: #1386993T`_MOndrej Holy <oholy@redhat.com> - 1.36.2-7bU- Fix unapplied patch (#2093816)s__ Ondrej Holy <oholy@redhat.com> - 1.36.2-6bx@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e^_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|]_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r\_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R[_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)
" 0T~ " ej_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|i_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)rh_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)Rg_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^fe[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268xe_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)ad_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)ic_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256
" 0T~ " er_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|q_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)rp_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)Ro_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^ne[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268xm_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)al_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)ik_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256
3a ^ze[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268xy_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)ax_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)iw_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256qv_Ondrej Holy <oholy@redhat.com> - 1.30.4-2XPA- Add explicit gvfs-client requirements
- Resolves: #1386993[u_[Ondrej Holy <oholy@redhat.com> - 1.30.4-1XP@- Update to 1.30.4
- Resolves: #1386993Tt_MOndrej Holy <oholy@redhat.com> - 1.36.2-7bU- Fix unapplied patch (#2093816)ss_ Ondrej Holy <oholy@redhat.com> - 1.36.2-6bx@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)
" *6b " ^e[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268x_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)a _gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)i_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256e~_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|}_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r|_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R{_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)
/ *6X / q
_ Ondrej Holy <oholy@redhat.com> - 1.30.4-2XPA- Add explicit gvfs-client requirements
- Resolves: #1386993[ _[ Ondrej Holy <oholy@redhat.com> - 1.30.4-1XP@- Update to 1.30.4
- Resolves: #1386993T_MOndrej Holy <oholy@redhat.com> - 1.36.2-7bU- Fix unapplied patch (#2093816)s_ Ondrej Holy <oholy@redhat.com> - 1.36.2-6bx@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)
" 0T~ " e_o Ondrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|_ Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r_ Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R_G Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^e[ Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268x
_ Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)a _g Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)i _w Ondrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256
" 0T~ " e_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`- Fix udisks2 volume monitor leaks (rhbz#1944813)|_Ondrej Holy <oholy@redhat.com> - 1.36.2-4^1- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r_Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f- Force NT1 protocol version for workgroup support (#1619719)R_GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R@- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^e[Kalev Lember <klember@redhat.com> - 1.36.2-1Z@- Update to 1.36.2
- Resolves: #1569268x_Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z- Fix network backend crashes when creating proxy failed (#1465302)a_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y- Rebuild against newer libgphoto2 (#1500216)i_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X- Handle SecurID password prompt
- Resolves: #1440256
P 3 t P J"Y?Daniel Mach <dmach@redhat.com> - 1.5-7RU- Mass rebuild 2014-01-24J!Y?Daniel Mach <dmach@redhat.com> - 1.5-6Rk- Mass rebuild 2013-12-27 c+Petr Stodulka <pstodulk@redhat.com> - 1.5-5R - fix issue with nonblocking open for PAR and OFL file
Resolves: rhbz#1028052 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5-4Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild WADaniel Drake <dsd@laptop.org> - 1.5-3P6@- Fix "gzip --rsyncable" functionality by removing a spurious blank line from
the patch. Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5-2P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildT _MOndrej Holy <oholy@redhat.com> - 1.36.2-7bU- Fix unapplied patch (#2093816)s_ Ondrej Holy <oholy@redhat.com> - 1.36.2-6bx@- Use O_RDWR to fix fstat when writing on SMB share (#2093816) of flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| 7 ? G O W _ g o w ( 1 9 A H P Y a i q y
" * 2 : B J R Z b j r z
" ) 1 7 > D J Q W ^ e k q x ~ " ) + . 2 4 7 ; > @ D G I M Q S V X Z \ ` d i n s x z } ! # & (
* , 0
4
) c ) d)akRyan O'Hara <rohara@redhat.com> - 1.5.18-3Wi,@- Fix TCP user timeout patch for 1.5.18 releasel(a{Ryan O'Hara <rohara@redhat.com> - 1.5.18-2Wb- Add TARGET to install-bin for haproxy-systemd-wrappera'aeRyan O'Hara <rohara@redhat.com> - 1.5.18-1WaC@- Update to stable release 1.5.18 (#1344012)&g%Jakub Martisko <jamartis@redhat.com> - 1.5-11b^@- fix an arbitrary-file-write vulnerability in zgrep
Resolves: CVE-2022-1271)%gmJakub Martisko <jamartis@redhat.com> - 1.5-10Yz- doc change: missing grep options are now mentioned in the zgrep
man pages/help message
Resolves: #1437002V$cMPetr Stodulka <pstodulk@redhat.com> - 1.5-9Xf@- fix zfoce
Resolves: #1382054
#c3Petr Stodulka <pstodulk@redhat.com> - 1.5-8U- Gzip overwrite existing files when user choose "no" on yes/no question.
It's due to wrong dupicit declaration of yesno() function in gzip.h
which is compiled wrong with -O2 option.
Resolves: rhbz#1201689
Id V1s=Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.2S- Resolves: rhbz#1125544j0esRyan O'Hara <rohara@redhat.com> - 1.5.18-9.1`@- Fix health checks for flapping servers (#1947750)|/aRyan O'Hara <rohara@redhat.com> - 1.5.18-9\v{- Detect down servers with mutliple tcp-check connect rules (#1677420)c.aiRyan O'Hara <rohara@redhat.com> - 1.5.18-8[Xf@- Build with USE_GETADDRINFO option (#1598491)]-a]Ryan O'Hara <rohara@redhat.com> - 1.5.18-7Z - Rebuild with openssl-1.0.2k (#1509139)l,a{Ryan O'Hara <rohara@redhat.com> - 1.5.18-6Y#@- Use KillMode=mixed in systemd service file (#1444709)q+aRyan O'Hara <rohara@redhat.com> - 1.5.18-5X~@- Use soft-static allocation for haproxy UID/GID (#1386130)q*aRyan O'Hara <rohara@redhat.com> - 1.5.18-4X,J@- Return correct exit codes from systemd-wrapper (#1391990)
lj o7soRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y@- Rebuild for OCaml 4.05
resolves: rhbz#1447983$6sWRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X- Tolerate corruption in some hives
resolves: rhbz#1423436
- Switch to using git to manage patches.B5sRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7TiA- Fix: "Argument list too long" when using virt-v2v on Windows guest
with French copy of Citrix installed
related: rhbz#1145056n4smRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti@- Fix: typo in man page
resolves: rhbz#1099286
3s)Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td@- Fix: hivex missing checks for small/truncated files
resolves: rhbz#11589922s/Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"@- Fix: hivexml generates "Argument list too long" error.
resolves: rhbz#1145056
p _r p n>smRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti@- Fix: typo in man page
resolves: rhbz#1099286
=s)Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td@- Fix: hivex missing checks for small/truncated files
resolves: rhbz#1158992<s/Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"@- Fix: hivexml generates "Argument list too long" error.
resolves: rhbz#1145056V;s=Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.2S- Resolves: rhbz#1125544:u;Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504)
resolves: rhbz#19505009uRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^@- Increase limits on number of subkeys etc.
resolves: rhbz#1822889{8sRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x.
resolves: rhbz#1447983
: Du;Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504)
resolves: rhbz#1950500CuRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^@- Increase limits on number of subkeys etc.
resolves: rhbz#1822889{BsRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x.
resolves: rhbz#1447983oAsoRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y@- Rebuild for OCaml 4.05
resolves: rhbz#1447983$@sWRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X- Tolerate corruption in some hives
resolves: rhbz#1423436
- Switch to using git to manage patches.B?sRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7TiA- Fix: "Argument list too long" when using virt-v2v on Windows guest
with French copy of Citrix installed
related: rhbz#1145056
lj oJsoRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y@- Rebuild for OCaml 4.05
resolves: rhbz#1447983$IsWRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X- Tolerate corruption in some hives
resolves: rhbz#1423436
- Switch to using git to manage patches.BHsRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7TiA- Fix: "Argument list too long" when using virt-v2v on Windows guest
with French copy of Citrix installed
related: rhbz#1145056nGsmRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti@- Fix: typo in man page
resolves: rhbz#1099286
Fs)Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td@- Fix: hivex missing checks for small/truncated files
resolves: rhbz#1158992Es/Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"@- Fix: hivexml generates "Argument list too long" error.
resolves: rhbz#1145056
= _? = nQsmRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti@- Fix: typo in man page
resolves: rhbz#1099286
Ps)Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td@- Fix: hivex missing checks for small/truncated files
resolves: rhbz#1158992Os/Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"@- Fix: hivexml generates "Argument list too long" error.
resolves: rhbz#1145056Nu Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.12a@- Limit recursion in ri-records (CVE-2021-3622)
resolves: rhbz#1976193Mu;Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504)
resolves: rhbz#1950500LuRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^@- Increase limits on number of subkeys etc.
resolves: rhbz#1822889{KsRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x.
resolves: rhbz#1447983
: Wu;Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504)
resolves: rhbz#1950500VuRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^@- Increase limits on number of subkeys etc.
resolves: rhbz#1822889{UsRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x.
resolves: rhbz#1447983oTsoRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y@- Rebuild for OCaml 4.05
resolves: rhbz#1447983$SsWRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X- Tolerate corruption in some hives
resolves: rhbz#1423436
- Switch to using git to manage patches.BRsRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7TiA- Fix: "Argument list too long" when using virt-v2v on Windows guest
with French copy of Citrix installed
related: rhbz#1145056
t $^sWRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X- Tolerate corruption in some hives
resolves: rhbz#1423436
- Switch to using git to manage patches.B]sRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7TiA- Fix: "Argument list too long" when using virt-v2v on Windows guest
with French copy of Citrix installed
related: rhbz#1145056n\smRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti@- Fix: typo in man page
resolves: rhbz#1099286
[s)Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td@- Fix: hivex missing checks for small/truncated files
resolves: rhbz#1158992Zs/Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"@- Fix: hivexml generates "Argument list too long" error.
resolves: rhbz#1145056VYs=Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.2S- Resolves: rhbz#1125544Xu Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.12a@- Limit recursion in ri-records (CVE-2021-3622)
resolves: rhbz#1976193
e r+V: e D
07cfec6beda5578439d467fa4a51b7e846ea94e1eb455753928367e7fd96ac68D
35fc790f76f1d12e738a6b5cd1438085704844f9c267638a15f9cc080376b10dD
9a93379d2c2af5db3ccd19b3b12e93f6dee917f2156fc18048525a7a90b313caD
c425b045fd266e2130faf0b97fe7cadc5218ad8cbb8e87ffbafe1d35b166ff43D
e083624285f3f8668aeebe5e4297e96c9e4ea9ed3cece7a3318166272f0fe11aD
4cf62f2fe312ff9b70310eeb760aecc8141285cba4ffec167b47f1cd26cb8fecD
95e6995373810d5b756222856d1b5d2f7d82bcb15022cc12282cbc282404516fD
c1f39d4de68160899478e6a3a13d87ca0cbb510af261d0319a2c3f3690cf263fD
bc29e9309d0d6c8bcbf454c1d73fd5eda133e3cd0a96c01283bd3c2830a03310D
233182440f451ea41600279219e708b82494832752dd921ec2f2e4c0ab2a7353D
d39fb02417c772d1ee5c9eb6d9a3981e59719475b6865e25c7e431882fec497bD
fd358c591bdefefe4f8f4b730734f8e570c3f50680413739ef8785c99d73fdddD
12aa178b2c59b3f4c2d815f73b977ffeb7703da8b0da0e7a3a6f02c9aebee2a4
o o
es) Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td@- Fix: hivex missing checks for small/truncated files
resolves: rhbz#1158992ds/ Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"@- Fix: hivexml generates "Argument list too long" error.
resolves: rhbz#1145056Vcs= Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.2S- Resolves: rhbz#1125544bu;Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504)
resolves: rhbz#1950500auRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^@- Increase limits on number of subkeys etc.
resolves: rhbz#1822889{`sRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x.
resolves: rhbz#1447983o_soRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y@- Rebuild for OCaml 4.05
resolves: rhbz#1447983
!1 ku Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^@- Increase limits on number of subkeys etc.
resolves: rhbz#1822889{js Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x.
resolves: rhbz#1447983oiso Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y@- Rebuild for OCaml 4.05
resolves: rhbz#1447983$hsW Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X- Tolerate corruption in some hives
resolves: rhbz#1423436
- Switch to using git to manage patches.Bgs Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7TiA- Fix: "Argument list too long" when using virt-v2v on Windows guest
with French copy of Citrix installed
related: rhbz#1145056nfsm Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti@- Fix: typo in man page
resolves: rhbz#1099286
a e@ a $qsW
Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X- Tolerate corruption in some hives
resolves: rhbz#1423436
- Switch to using git to manage patches.Bps
Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7TiA- Fix: "Argument list too long" when using virt-v2v on Windows guest
with French copy of Citrix installed
related: rhbz#1145056nosm
Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti@- Fix: typo in man page
resolves: rhbz#1099286
ns)
Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td@- Fix: hivex missing checks for small/truncated files
resolves: rhbz#1158992ms/
Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"@- Fix: hivexml generates "Argument list too long" error.
resolves: rhbz#1145056lu; Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504)
resolves: rhbz#1950500
< a <
xs) Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td@- Fix: hivex missing checks for small/truncated files
resolves: rhbz#1158992ws/ Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"@- Fix: hivexml generates "Argument list too long" error.
resolves: rhbz#1145056vu
Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.12a@- Limit recursion in ri-records (CVE-2021-3622)
resolves: rhbz#1976193uu;
Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504)
resolves: rhbz#1950500tu
Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^@- Increase limits on number of subkeys etc.
resolves: rhbz#1822889{ss
Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x.
resolves: rhbz#1447983orso
Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y@- Rebuild for OCaml 4.05
resolves: rhbz#1447983
!1 ~u Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^@- Increase limits on number of subkeys etc.
resolves: rhbz#1822889{}s Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x.
resolves: rhbz#1447983o|so Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y@- Rebuild for OCaml 4.05
resolves: rhbz#1447983${sW Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X- Tolerate corruption in some hives
resolves: rhbz#1423436
- Switch to using git to manage patches.Bzs Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7TiA- Fix: "Argument list too long" when using virt-v2v on Windows guest
with French copy of Citrix installed
related: rhbz#1145056nysm Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti@- Fix: typo in man page
resolves: rhbz#1099286
} e* } # Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-10Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuildmgw Tomas Radej <tradej@redhat.com> - 1:1.8.1.3-9P7l- Switched from SysV to systemd
- Spec rearrangements! Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-8P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildbuS Alexander Kurtakov <akurtako@redhat.com> 1:1.8.1.3-7O~- Switch to servlet 3.0 by default.Gg+ Tomas Radej <tradej@redhat.com> - 1:1.8.1.3-6OX@- Fixed symlink u Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.12a@- Limit recursion in ri-records (CVE-2021-3622)
resolves: rhbz#1976193u; Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504)
resolves: rhbz#1950500
sI b uS
Alexander Kurtakov <akurtako@redhat.com> 1:1.8.1.3-7O~- Switch to servlet 3.0 by default.G g+
Tomas Radej <tradej@redhat.com> - 1:1.8.1.3-6OX@- Fixed symlink
w' Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-15ch@- Fix possible remote code execution vulnerability
- Resolves: CVE-2022-418538 w{ Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-14VZ- Remove dependency on initscripts
- Add After=network.target to systemd service
- Resolves: rhbz#1283893, rhbz#1269717Qg? Daniel Mach <dmach@redhat.com> - 1:1.8.1.3-13Rk- Mass rebuild 2013-12-27w Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-12Qz- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571 w Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-11Q- Fix incorrect permissions on systemd unit file
- Resolves: rhbz#963911
. bS> . 8w{
Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-14VZ- Remove dependency on initscripts
- Add After=network.target to systemd service
- Resolves: rhbz#1283893, rhbz#1269717Qg?
Daniel Mach <dmach@redhat.com> - 1:1.8.1.3-13Rk- Mass rebuild 2013-12-27w
Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-12Qz- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571 w
Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-11Q- Fix incorrect permissions on systemd unit file
- Resolves: rhbz#963911#
Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-10Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuildmgw
Tomas Radej <tradej@redhat.com> - 1:1.8.1.3-9P7l- Switched from SysV to systemd
- Spec rearrangements
!
Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-8P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
n$! w Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-11Q- Fix incorrect permissions on systemd unit file
- Resolves: rhbz#963911#Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-10Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildmgwTomas Radej <tradej@redhat.com> - 1:1.8.1.3-9P7l- Switched from SysV to systemd
- Spec rearrangements!Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-8P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildbuSAlexander Kurtakov <akurtako@redhat.com> 1:1.8.1.3-7O~- Switch to servlet 3.0 by default.Gg+Tomas Radej <tradej@redhat.com> - 1:1.8.1.3-6OX@- Fixed symlinkw'
Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-15ch@- Fix possible remote code execution vulnerability
- Resolves: CVE-2022-41853
x$h' m"gwTomas Radej <tradej@redhat.com> - 1:1.8.1.3-9P7l- Switched from SysV to systemd
- Spec rearrangements!!Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-8P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildb uSAlexander Kurtakov <akurtako@redhat.com> 1:1.8.1.3-7O~- Switch to servlet 3.0 by default.G g+Tomas Radej <tradej@redhat.com> - 1:1.8.1.3-6OX@- Fixed symlink w'Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-15ch@- Fix possible remote code execution vulnerability
- Resolves: CVE-2022-418538 w{Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-14VZ- Remove dependency on initscripts
- Add After=network.target to systemd service
- Resolves: rhbz#1283893, rhbz#1269717Q g?Daniel Mach <dmach@redhat.com> - 1:1.8.1.3-13Rk- Mass rebuild 2013-12-27wMikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-12Qz- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571
6 aL< 6 q)]Joe Orton <jorton@redhat.com> - 2.4.6-89\- fix per-request leak of bucket brigade structure (#1583218)(w'Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-15ch@- Fix possible remote code execution vulnerability
- Resolves: CVE-2022-418538'w{Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-14VZ- Remove dependency on initscripts
- Add After=network.target to systemd service
- Resolves: rhbz#1283893, rhbz#1269717Q&g?Daniel Mach <dmach@redhat.com> - 1:1.8.1.3-13Rk- Mass rebuild 2013-12-27%wMikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-12Qz- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571 $w Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-11Q- Fix incorrect permissions on systemd unit file
- Resolves: rhbz#963911##Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-10Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
+k9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connectionT*k?Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency
2 2 G.k%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications-kILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timec,]mJoe Orton <jorton@redhat.com> - 2.4.6-92]^- htpasswd: add SHA-2 crypt() support (#1486889)
kb P2}%CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.1ah- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases.1qmLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"S0k=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues/k9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
value
4k9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connectionT3k?Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency
2 2 G7k%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications6kILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timec5]mJoe Orton <jorton@redhat.com> - 2.4.6-92]^- htpasswd: add SHA-2 crypt() support (#1486889)
kb ;q/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.:qmLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"S9k=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues8k9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
value
) ,) >kILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timec=]mJoe Orton <jorton@redhat.com> - 2.4.6-92]^- htpasswd: add SHA-2 crypt() support (#1486889)P<}%CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.2a@- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases
5 @k9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
valueG?k%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications
d -DqkLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart contentCq/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.BqmLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"SAk=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues
E E GkILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timePF}%CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.4aZ@- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliasesFEW7Luboš Uhliarik <luhliari@redhat.com>a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
5 Ik9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
valueGHk%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications
d -MqkLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart contentLq/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.KqmLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"SJk=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues
Qm7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+@- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
SIGUSR1PP}%CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.5b<]@- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases:OqLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlierSNq7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
4 4 TSk?Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyqR]Joe Orton <jorton@redhat.com> - 2.4.6-89\- fix per-request leak of bucket brigade structure (#1583218)
h k h VkILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timecU]mJoe Orton <jorton@redhat.com> - 2.4.6-92]^- htpasswd: add SHA-2 crypt() support (#1486889)Tk9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection
5 Xk9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
valueGWk%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications
NZy%CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos_- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliasesSYk=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues
e r+V: e D!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 \k9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
valueG[k%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications
d -`qkLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart content_q/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.^qmLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"S]k=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues
j > j Pd}%CentOS Sources <bugs@centos.org> - 2.4.6-98.el7.centos.6c@- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases)cqcLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
corrupt and mixed-up responses:bqLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlierSaq7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
kb -iqkLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart contenthq/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.gqmLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"Sfk=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issuesek9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
value
O > O FnOAJohnny Hughes <johnny@centos.org>d-b- Manual CentOS Debranding"mqULuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
mod_rewrite and mod_proxy)lqcLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
corrupt and mixed-up responses:kqLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlierSjq7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
kb -sqkLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart contentrq/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.qqmLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"Spk=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issuesok9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
value
> xqLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690"wqULuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
mod_rewrite and mod_proxy)vqcLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
corrupt and mixed-up responses:uqLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlierStq7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
4 4 Tzk?Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyqy]Joe Orton <jorton@redhat.com> - 2.4.6-89\- fix per-request leak of bucket brigade structure (#1583218)
h k h }kILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timec|]mJoe Orton <jorton@redhat.com> - 2.4.6-92]^- htpasswd: add SHA-2 crypt() support (#1486889){k9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection
5 k9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
valueG~k%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications
# # P}%CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.1ah- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases.qmLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"S k=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues
k9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connectionTk?Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency
2 2 Gk%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applicationskILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timec]mJoe Orton <jorton@redhat.com> - 2.4.6-92]^- htpasswd: add SHA-2 crypt() support (#1486889)
kb q/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.
qmLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"S k=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issuesk9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
value
) ,) kILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timec
]mJoe Orton <jorton@redhat.com> - 2.4.6-92]^- htpasswd: add SHA-2 crypt() support (#1486889)P }%CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.2a@- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases
5 k9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
valueGk%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications
d -qkLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart contentq/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.qmLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"Sk=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues
E E kILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timeP}%CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.4aZ@- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliasesFW7Luboš Uhliarik <luhliari@redhat.com>a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
5 k9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
valueGk%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications
d - qkLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart content q/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.qmLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"Sk=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues
!m7 Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+@- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
SIGUSR1P }%CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.5b<]@- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases: qLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlierS q7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
4 4 T#k? Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq"] Joe Orton <jorton@redhat.com> - 2.4.6-89\- fix per-request leak of bucket brigade structure (#1583218)
h k h &kI Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timec%]m Joe Orton <jorton@redhat.com> - 2.4.6-92]^- htpasswd: add SHA-2 crypt() support (#1486889)$k9 Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection
5 (k9 Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
valueG'k% Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications
N*y% CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos_- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliasesS)k= Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues
5 ,k9 Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
valueG+k% Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications
d -0qk Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart content/q/ Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix..qm Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"S-k= Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues
j > j P4}% CentOS Sources <bugs@centos.org> - 2.4.6-98.el7.centos.6c@- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases)3qc Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
corrupt and mixed-up responses:2q Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlierS1q7 Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
kb -9qk Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart content8q/ Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.7qm Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"S6k= Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues5k9 Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
value
O > O F>OA Johnny Hughes <johnny@centos.org>d-b- Manual CentOS Debranding"=qU Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
mod_rewrite and mod_proxy)<qc Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
corrupt and mixed-up responses:;q Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlierS:q7 Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
kb -Cqk Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart contentBq/ Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.Aqm Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"S@k= Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues?k9 Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
value
> Hq Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690"GqU Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
mod_rewrite and mod_proxy)Fqc Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
corrupt and mixed-up responses:Eq Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlierSDq7 Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
4 4 TJk? Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyqI] Joe Orton <jorton@redhat.com> - 2.4.6-89\- fix per-request leak of bucket brigade structure (#1583218)
h k h MkI Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timecL]m Joe Orton <jorton@redhat.com> - 2.4.6-92]^- htpasswd: add SHA-2 crypt() support (#1486889)Kk9 Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection
5 Ok9 Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
valueGNk% Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications
# # PR}% CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.1ah- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases.Qqm Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"SPk= Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues
Tk9!Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connectionTSk?!Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency
2 2 GWk%!Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applicationsVkI!Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timecU]m!Joe Orton <jorton@redhat.com> - 2.4.6-92]^- htpasswd: add SHA-2 crypt() support (#1486889)
kb [q/!Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.Zqm!Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"SYk=!Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issuesXk9!Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
value
) ,) ^kI"Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timec]]m"Joe Orton <jorton@redhat.com> - 2.4.6-92]^- htpasswd: add SHA-2 crypt() support (#1486889)P\}%!CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.2a@- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases
e r+V: e D.
4317de17f229764365281623322d3bfc068eeae3772e61937438e1e190c1251eD-
80b0aaff62516f728ee4d1972185e7b7b5f5d15ea67da82dd19429fac70a5b23D,
0094b5e088ab7669b50681c5ee1c139c5ea4b295dff26681ef9aabc6f5a119dbD+
601f376aa7ef59f60e13ba11f0a9a7286b883a945173b5b829fe2e939b6b3d1eD*
8fefb0595d7ec2b0969e86042785c698809542ecd2b793434519146c6285a65eD)
ab57b19bedc00d6be037859d8d8126fff6c0f4421a2b085376f188106987b7e2D(
2efed6a1834b9396c783a23359a0750766c22f944cdc5953485f45050af967feD'
27c88f137de5866849397dd80af6fd026191916624a901d7d157db89d720351bD&
1900d58b22825187824aca7c1c6d194d7a401d5fcf0c433dc2037ac97141b1fdD%
4112f1f23e8f476ae869ef1e7ba7b1dcd072616c0fcd173ce6f6a784d7d9f05fD$
5ca852164720791fe6e270a360e14b479b57e0fa1f71c93c1e582a9179353c61D#
a52b0985bc9791dee53f7a73f22051cc229824892249b53b748eaad81619a0bfD"
fd5c2fb9ea8fe33dda81b2c13693c8901313964b621a4845172a14c12df1439a
5 `k9"Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
valueG_k%"Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications
d -dqk"Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart contentcq/"Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.bqm"Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"Sak="Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues
E E gkI#Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timePf}%"CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.4aZ@- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliasesFeW7"Luboš Uhliarik <luhliari@redhat.com>a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
5 ik9#Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
valueGhk%#Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications
d -mqk#Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart contentlq/#Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.kqm#Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"Sjk=#Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues
qm7$Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+@- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
SIGUSR1Pp}%#CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.5b<]@- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases:oq#Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlierSnq7#Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
4 4 Tsk?$Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyqr]$Joe Orton <jorton@redhat.com> - 2.4.6-89\- fix per-request leak of bucket brigade structure (#1583218)
h k h vkI$Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timecu]m$Joe Orton <jorton@redhat.com> - 2.4.6-92]^- htpasswd: add SHA-2 crypt() support (#1486889)tk9$Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection
5 xk9$Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
valueGwk%$Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications
Nzy%$CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos_- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliasesSyk=$Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues
5 |k9%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
valueG{k%%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications
d - qk%Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart contentq/%Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.~qm%Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"S}k=%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues
j > j P}%%CentOS Sources <bugs@centos.org> - 2.4.6-98.el7.centos.6c@- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases)qc%Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
corrupt and mixed-up responses:q%Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlierSq7%Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
kb - qk&Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart contentq/&Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.qm&Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"Sk=&Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issuesk9&Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
value
O > O FOA&Johnny Hughes <johnny@centos.org>d-b- Manual CentOS Debranding"
qU&Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
mod_rewrite and mod_proxy) qc&Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
corrupt and mixed-up responses: q&Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlierS
q7&Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
kb -qk'Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart contentq/'Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.qm'Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"Sk='Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issuesk9'Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
value
> q'Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690"qU'Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
mod_rewrite and mod_proxy)qc'Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
corrupt and mixed-up responses:q'Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlierSq7'Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
4 4 Tk?(Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq](Joe Orton <jorton@redhat.com> - 2.4.6-89\- fix per-request leak of bucket brigade structure (#1583218)
h k h kI(Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timec ]m(Joe Orton <jorton@redhat.com> - 2.4.6-92]^- htpasswd: add SHA-2 crypt() support (#1486889)k9(Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection
5 k9(Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
valueG k%(Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications
# # P"}%(CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.1ah- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases.!qm(Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"S k=(Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues
$k9)Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connectionT#k?)Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency
2 2 G'k%)Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications&kI)Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timec%]m)Joe Orton <jorton@redhat.com> - 2.4.6-92]^- htpasswd: add SHA-2 crypt() support (#1486889)
kb +q/)Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.*qm)Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"S)k=)Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues(k9)Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
value
) ,) .kI*Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timec-]m*Joe Orton <jorton@redhat.com> - 2.4.6-92]^- htpasswd: add SHA-2 crypt() support (#1486889)P,}%)CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.2a@- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases
5 0k9*Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
valueG/k%*Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications
d -4qk*Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart content3q/*Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.2qm*Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"S1k=*Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues
E E 7kI+Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timeP6}%*CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.4aZ@- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliasesF5W7*Luboš Uhliarik <luhliari@redhat.com>a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
5 9k9+Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
valueG8k%+Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications
d -=qk+Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart content<q/+Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.;qm+Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"S:k=+Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues
Am7,Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+@- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
SIGUSR1P@}%+CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.5b<]@- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases:?q+Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlierS>q7+Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
4 4 TCk?,Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyqB],Joe Orton <jorton@redhat.com> - 2.4.6-89\- fix per-request leak of bucket brigade structure (#1583218)
h k h FkI,Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry timecE]m,Joe Orton <jorton@redhat.com> - 2.4.6-92]^- htpasswd: add SHA-2 crypt() support (#1486889)Dk9,Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection
5 Hk9,Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
valueGGk%,Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications
NJy%,CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos_- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliasesSIk=,Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues of flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| > C H J M O R T W [ ^ ` d g i m q !s "v #x $z %| & ' ( ) * + , - . /" 0$ 1' 2+ 3. 40 54 67 79 8= 9A :C ;F <H =J ?L @P AT BY C^ Ec Fh Gn Hu I| J K
L M N O& P- Q4 R; SB TI UP VW W^ Xe Zl [t \{ ] ^
_ ` a b& c- d4 e; fB gI hP iW j^ ke ml ns oy q} r t u
w x y z {" }$ ~' * - 0 4 6 9 < ?
5 Lk9-Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
valueGKk%-Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications
d -Pqk-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart contentOq/-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.Nqm-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"SMk=-Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues
j > j PT}%-CentOS Sources <bugs@centos.org> - 2.4.6-98.el7.centos.6c@- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases)Sqc-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
corrupt and mixed-up responses:Rq-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlierSQq7-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
kb -Yqk.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart contentXq/.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.Wqm.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"SVk=.Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issuesUk9.Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
value
O > O F^OA.Johnny Hughes <johnny@centos.org>d-b- Manual CentOS Debranding"]qU.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
mod_rewrite and mod_proxy)\qc.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
corrupt and mixed-up responses:[q.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlierSZq7.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
e r+V: e D;
e58be69903032ce19789e8066ac18b837e6cf4b67db9460c5dbac4897f678352D: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 -cqk/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart contentbq//Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix.aqm/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:"S`k=/Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues_k9/Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
value
> hq/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690"gqU/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
mod_rewrite and mod_proxy)fqc/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
corrupt and mixed-up responses:eq/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlierSdq7/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session
N D: N
n[;0Honggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585VmYU0Jarod Wilson <jarod@redhat.com> 22.4-1]|@- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296 lY)0Jarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541xkY0Jarod Wilson <jarod@redhat.com> 22.1-3\- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426 jY?0Jarod Wilson <jarod@redhat.com> 22.1-2\- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#16874268iY0Jarod Wilson <jarod@redhat.com> 22.1-1\e- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274
Y
{U Y uk 1Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barqtk{1Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\O- Resolves: #1693926 - Commit hangul preedit with mouse
sk+1Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus moduler[O0Honggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699q[C0Honggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221
p[;0Honggang Li <honli@redhat.com> - 22.4-4^- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482bo[m0Honggang Li <honli@redhat.com> - 22.4-3^@- Restore three patches
- Resolves: rhbz#1817412
y _|c_1Ray Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaks{m1Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows zm1Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionzyk 1Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()xk1Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowspwky1Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.povk 1Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's death
z rv| z zk 2Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()k2Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowspky2Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po k 2Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's deathk 2Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq~k{2Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\O- Resolves: #1693926 - Commit hangul preedit with mouse
}k+2Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module
|
k3Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp ky3Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.pok 3Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's deathk 3Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar_c_2Ray Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaksm2Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows m2Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression
y k 4Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar}m3Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d8- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch m3Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_c_3Ray Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaks
m3Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows m3Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz k 3Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()
y _c_4Ray Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaksm4Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows m4Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionzk 4Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()k4Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowspky4Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.pok 4Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's death
x |nr x p ky5Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po k 5Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's death k 5Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq k{5Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\O- Resolves: #1693926 - Commit hangul preedit with mouse
k+5Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module}m4Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d8- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch m4Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal
{z q&k{6Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\O- Resolves: #1693926 - Commit hangul preedit with mouse
%k+6Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module_$c_5Ray Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaks#m5Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows "m5Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz!k 5Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid() k5Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows
r x~| r -m6Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows ,m6Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz+k 6Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()*k6Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp)ky6Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po(k 6Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's death'k 6Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar
4m7Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz3k 7Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()2k7Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp1ky7Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po0k 7Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's death/k 7Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar_.c_6Ray Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaks
z p;ky8Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po:k 8Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's death9k 8Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar}8m7Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d8- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch 7m7Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_6c_7Ray Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaks5m7Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows
{z }Bm8Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d8- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch Am8Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_@c_8Ray Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaks?m8Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows >m8Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz=k 8Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()<k8Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows
z rv| z zIk 9Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()Hk9Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowspGky9Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.poFk 9Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's deathEk 9Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barqDk{9Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\O- Resolves: #1693926 - Commit hangul preedit with mouse
Ck+9Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module
| Pk:Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowspOky:Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.poNk :Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's deathMk :Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar_Lc_9Ray Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaksKm9Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows Jm9Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression
y
Wk+;Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module}Vm:Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d8- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch Um:Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_Tc_:Ray Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaksSm:Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows Rm:Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionzQk :Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()
}
^m;Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz]k ;Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()\k;Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp[ky;Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.poZk ;Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's deathYk ;Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barqXk{;Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\O- Resolves: #1693926 - Commit hangul preedit with mouse
z peky<Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.podk <Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's deathck <Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barqbk{<Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\O- Resolves: #1693926 - Commit hangul preedit with mouse
ak+<Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module_`c_;Ray Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaks_m;Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows
e r+V: e DH
982b829b97c5eb8400e883ee7e5cd1199ec463fe88265cc6be5560667a3366eeDG
a22140d2598b1d94d1cef9f4d960ba6d9726634bd9bec4682f6338583e5bedbeDF
449b85f4d50008df3b5663b39feaa09ec5df8f99f0a2327e0e8e846345963022DE
f74f11e10a148e5f0fa3445db786553e080cb5d020e255c3b688dfd528ab6f2cDD
c3b0298c3bbfa69481b4841885e4c53580433e8d4610ea22939be12d797bd88aDC
7690f944ed218f74b3624308e1a4d4ddbbef310d2d09257774fdfdadf5cd3916DB
9550ba6de8671ca79fa26dead08e944ef94706fde1c73e99c2c59e595b752061DA
7a99b195e228185309513ea38f47665d85c3f48be1efc08b2131eebb4af1771cD@
476abb9c019d06d8fbb8b7d20433405022b208c2c777b1de0c036fff3108fc7eD?
b1f22640d57b95b5f307687ba9cae4a938f5332030e06b6e6ade62170f059a4fD>
faf21678af2663e54fcc8f5016f8bcab54c797e4a2817cccba232b0e673d3370D=
4c96449444e550b77b9d63a86b708d50e9b146f62a64f89fbfce2abfa49c871fD<
1b1b3c99c21402de3620ed1fecbd44518682eccd70866a5c3c361b33f649f188
{z
lk =Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's deathkk =Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar_jc_<Ray Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaksim<Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows hm<Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionzgk <Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()fk<Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows
}tm=Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d8- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch sm=Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_rc_=Ray Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaksqm=Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows pm=Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionzok =Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()nk=Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowspmky=Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po
r x~| r {m>Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows zm>Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionzyk >Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()xk>Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowspwky>Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.povk >Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's deathuk >Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar
k ?Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's deathk ?Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq k{?Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\O- Resolves: #1693926 - Commit hangul preedit with mouse
k+?Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module}~m>Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d8- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch }m>Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_|c_>Ray Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaks
q
k{@Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\O- Resolves: #1693926 - Commit hangul preedit with mouse
k+@Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module_c_?Ray Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaksm?Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows m?Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionzk ?Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()k?Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowspky?Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po
r x~| r m@Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows m@Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionzk @Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()k@Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp
ky@Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po k @Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's death k @Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar
mATakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionzk ATakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()kATakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowspkyATakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.pok ATakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's deathk ATakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar_c_@Ray Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaks
z p kyBTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po k BTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's death k BTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar} mATakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d8- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch mATakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_c_ARay Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaksmATakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows
{z }&mBTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d8- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch %mBTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_$c_BRay Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaks#mBTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows "mBTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz!k BTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid() kBTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows
z rv| z z-k CTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid(),kCTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp+kyCTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po*k CTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's death)k CTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq(k{CTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\O- Resolves: #1693926 - Commit hangul preedit with mouse
'k+CTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module
|
4k DTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's death3k DTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq2k{DTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\O- Resolves: #1693926 - Commit hangul preedit with mouse
1k+DTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module_0c_CRay Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaks/mCTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows .mCTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression
;k ETakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar_:c_DRay Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaks9mDTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows 8mDTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz7k DTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()6kDTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp5kyDTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po
y _Bc_ERay Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaksAmETakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows @mETakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz?k ETakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()>kETakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp=kyETakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po<k ETakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's death
x |tz x zIk FTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()HkFTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowspGkyFTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.poFk FTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's deathEk FTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar}DmETakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d8- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch CmETakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal
| qPk{GTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\O- Resolves: #1693926 - Commit hangul preedit with mouse
Ok+GTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module}NmFTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d8- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch MmFTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_Lc_FRay Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaksKmFTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows JmFTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression
r x~| r WmGTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows VmGTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionzUk GTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()TkGTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowspSkyGTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.poRk GTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's deathQk GTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar
^mHTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz]k HTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()\kHTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp[kyHTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.poZk HTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's deathYk HTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar_Xc_GRay Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaks
z ek ITakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barqdk{ITakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\O- Resolves: #1693926 - Commit hangul preedit with mouse
ck+ITakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module}bmHTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d8- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch amHTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_`c_HRay Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaks_mHTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows
e r+V: e DU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 _lc_IRay Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leakskmITakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows jmITakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionzik ITakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()hkITakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowspgkyITakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.pofk ITakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's death
r x~| r smJTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^H- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows rmJTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ @- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionzqk JTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()pkJTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowspokyJTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.ponk JTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik- Resolves: #1686913 - ibus-daemon always will exits with parent's deathmk JTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar
+f byYoKJiri Vanek <jvanek@redhat.com> 1.6.2-4W~- fixed typo in provides
- Resolves: rhbz#1299537AxY+KJiri Vanek <jvanek@redhat.com> 1.6.2-3W-@- added --family to make it part of javas alternatives alignment
- java-javaver-openjdk collected into preffered_java
- Resolves: rhbz#1299537NwYEKJiri Vanek <jvanek@redhat.com> 1.6.2-1V- updated to 1.6.2
- fixed also rhbz#1303437 - packag p}vmJTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d8- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch umJTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_tc_JRay Strode <rstrode@redhat.com> - 1.5.17-12_@- Resolves: #1882009 - Fix GVariant leaks e owns /etc/bash_completion.d but it should not own it
- generated maven metadata (isntalled but not used.
set -e
_pompart="need"
_jarpart="tobe"
_filelist=".mfiles"
install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments
for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do
if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart ]; then
_jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart"
fi
done
python -m /usr/share/java-utils/maven_depmap \
-p "/usr" -n "" \
/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments/icedtea-web \
/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-poms/$_pompart \
>> ${_filelist}
sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64::' ${_filelist}
sort -u -o ${_filelist} ${_filelist}
- Resolves: rhbz#1299537
Y}Y]KJiri Vanek <jvanek@redhat.com> 1.7.1-1Z7* bump to 1.7.1
- Resolves: rhbz#1475411|U/KJiri Vanek <jvanek@redhat.com> 1.7-3YZ@- javaws specific manpage renmed from -suffix to .suffix
- Resolves: rhbz#1475411q{UKJiri Vanek <jvanek@redhat.com> 1.7-2YBA- gathered various patches from usptream
- Resolves: rhbz#1475411gzU{KJiri Vanek <jvanek@redhat.com> 1.7-1YB@- updated to itw 1.7 and sync from fedora
- added forgotten slaves of itweb-settings policyeditor
- Own %{_datadir}/%{name} dir
- Mark non-English man pages with %lang
- Install COPYING as %license
- last three by Ville Skytta <ville.skytta@iki.fi> via 1481270
- for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir
- removed maven macros in favour of manual handling (bug)
- Resolves: rhbz#1475411
( ZR ( bYoLJiri Vanek <jvanek@redhat.com> 1.6.2-4W~- fixed typo in provides
- Resolves: rhbz#1299537AY+LJiri Vanek <jvanek@redhat.com> 1.6.2-3W-@- added --family to make it part of javas alternatives alignment
- java-javaver-openjdk collected into preffered_java
- Resolves: rhbz#1299537NYELJiri Vanek <jvanek@redhat.com> 1.6.2-1V- updated to 1.6.2
- fixed also rhbz#1303437 - packag s YSKJiri Vanek <jvanek@redhat.com> 1.7.1-4_- Added Patch6, altjava.patch to make usage of alt-java prefferd over java
- Resolves: rhbz#1901639YKKJiri Vanek <jvanek@redhat.com> 1.7.1-3]0_A- Added Patch5, testTuning.patch to make tests pass inclean envirnment
- Resolves: rhbz#1724958
~YCKJiri Vanek <jvanek@redhat.com> 1.7.1-2]0_@- added patch1, patch4 and patch11 to fix CVE-2019-10182
- added patch2 to fix CVE-2019-10181
- added patch3 and patch33 to fix CVE-2019-10185
- Resolves: rhbz#1724958
- Resolves: rhbz#1725928
- Resolves: rhbz#1724989 e owns /etc/bash_completion.d but it should not own it
- generated maven metadata (isntalled but not used.
set -e
_pompart="need"
_jarpart="tobe"
_filelist=".mfiles"
install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments
for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do
if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart ]; then
_jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart"
fi
done
python -m /usr/share/java-utils/maven_depmap \
-p "/usr" -n "" \
/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments/icedtea-web \
/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-poms/$_pompart \
>> ${_filelist}
sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64::' ${_filelist}
sort -u -o ${_filelist} ${_filelist}
- Resolves: rhbz#1299537
YY]LJiri Vanek <jvanek@redhat.com> 1.7.1-1Z7* bump to 1.7.1
- Resolves: rhbz#1475411U/LJiri Vanek <jvanek@redhat.com> 1.7-3YZ@- javaws specific manpage renmed from -suffix to .suffix
- Resolves: rhbz#1475411qULJiri Vanek <jvanek@redhat.com> 1.7-2YBA- gathered various patches from usptream
- Resolves: rhbz#1475411gU{LJiri Vanek <jvanek@redhat.com> 1.7-1YB@- updated to itw 1.7 and sync from fedora
- added forgotten slaves of itweb-settings policyeditor
- Own %{_datadir}/%{name} dir
- Mark non-English man pages with %lang
- Install COPYING as %license
- last three by Ville Skytta <ville.skytta@iki.fi> via 1481270
- for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir
- removed maven macros in favour of manual handling (bug)
- Resolves: rhbz#1475411
( ZR ( b
YoMJiri Vanek <jvanek@redhat.com> 1.6.2-4W~- fixed typo in provides
- Resolves: rhbz#1299537A Y+MJiri Vanek <jvanek@redhat.com> 1.6.2-3W-@- added --family to make it part of javas alternatives alignment
- java-javaver-openjdk collected into preffered_java
- Resolves: rhbz#1299537N YEMJiri Vanek <jvanek@redhat.com> 1.6.2-1V- updated to 1.6.2
- fixed also rhbz#1303437 - packag v
YSLJiri Vanek <jvanek@redhat.com> 1.7.1-4_- Added Patch6, altjava.patch to make usage of alt-java prefferd over java
- Resolves: rhbz#1901639 YKLJiri Vanek <jvanek@redhat.com> 1.7.1-3]0_A- Added Patch5, testTuning.patch to make tests pass inclean envirnment
- Resolves: rhbz#1724958
YCLJiri Vanek <jvanek@redhat.com> 1.7.1-2]0_@- added patch1, patch4 and patch11 to fix CVE-2019-10182
- added patch2 to fix CVE-2019-10181
- added patch3 and patch33 to fix CVE-2019-10185
- Resolves: rhbz#1724958
- Resolves: rhbz#1725928
- Resolves: rhbz#1724989 e owns /etc/bash_completion.d but it should not own it
- generated maven metadata (isntalled but not used.
set -e
_pompart="need"
_jarpart="tobe"
_filelist=".mfiles"
install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments
for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do
if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart ]; then
_jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart"
fi
done
python -m /usr/share/java-utils/maven_depmap \
-p "/usr" -n "" \
/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments/icedtea-web \
/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-poms/$_pompart \
>> ${_filelist}
sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64::' ${_filelist}
sort -u -o ${_filelist} ${_filelist}
- Resolves: rhbz#1299537
YY]MJiri Vanek <jvanek@redhat.com> 1.7.1-1Z7* bump to 1.7.1
- Resolves: rhbz#1475411U/MJiri Vanek <jvanek@redhat.com> 1.7-3YZ@- javaws specific manpage renmed from -suffix to .suffix
- Resolves: rhbz#1475411qUMJiri Vanek <jvanek@redhat.com> 1.7-2YBA- gathered various patches from usptream
- Resolves: rhbz#1475411gU{MJiri Vanek <jvanek@redhat.com> 1.7-1YB@- updated to itw 1.7 and sync from fedora
- added forgotten slaves of itweb-settings policyeditor
- Own %{_datadir}/%{name} dir
- Mark non-English man pages with %lang
- Install COPYING as %license
- last three by Ville Skytta <ville.skytta@iki.fi> via 1481270
- for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir
- removed maven macros in favour of manual handling (bug)
- Resolves: rhbz#1475411
4 Z 4 {NDavid Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.46-1[@- ifup-post: fix incorrect condition for RESOLV_MODS (bug #1610411){NDavid Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.45-1[W- network: parsing of /proc/mounts returned (bug #1572659)
- netconsole: LSB header added (bug #1508489)
- ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384)YSMJiri Vanek <jvanek@redhat.com> 1.7.1-4_- Added Patch6, altjava.patch to make usage of alt-java prefferd over java
- Resolves: rhbz#1901639YKMJiri Vanek <jvanek@redhat.com> 1.7.1-3]0_A- Added Patch5, testTuning.patch to make tests pass inclean envirnment
- Resolves: rhbz#1724958
YCMJiri Vanek <jvanek@redhat.com> 1.7.1-2]0_@- added patch1, patch4 and patch11 to fix CVE-2019-10182
- added patch2 to fix CVE-2019-10181
- added patch3 and patch33 to fix CVE-2019-10185
- Resolves: rhbz#1724958
- Resolves: rhbz#1725928
- Resolves: rhbz#1724989
+ & + c aiNJan Macku <jamacku@redhat.com> - 9.49.53-1^Ǿ- rwtab: Add support for chrony (bug #1838260) aCNJan Macku <jamacku@redhat.con> - 9.49.52-1^x- ifup-eth: Switch to bc utility, which supports floating point computations (bug #1609687)ZaWNJan Macku <jamacku@redhat.com> - 9.49.51-1^r
@- Fix inline comment - (bug #1773798)aCNJan Macku <jamacku@redhat.com> - 9.49.50-1^h- Wait for scope link addresses as well as for scope global addresses - ipv6 (bug #1773798) a]NJan Macku <jamacku@redhat.com> - 9.49.49-1]Z@- ifup-eth: Check that device name is set (bug #1741830)
- Add option for IPv6 GRE tunnel (bug #1691552)aacNJan Macku <jamacku@redhat.com> - 9.49.48-1]Ik- network: don't fail with IFDOWN_ON_SHUTDOWN (bug #1693977)
- Configure autorelabel service to output to journal and to console if set (bug #1634661)
- Fix changelog typo^a_NJan Macku <jamacku@redhat.com> - 9.49.47-1\- Fix file permissions for /var/log/dmesg
}OFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1n qoNJan Macku <jamacku@redhat.com> - 9.49.53-1.el7_9.1_- rwtab: Allow updating mlocate.db (bug #1880095)
Y Y ";OFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o |}!}OFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv }qOFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|$uOFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm#UOFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l y'kOFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\&3OFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ%OFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
& '& }*}PFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv)}qPFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue\(}?OCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a*@- Roll in CentOS Branding ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
d d |-uPFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm,UPFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. +;PFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
l y0kPFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\/3PFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ.PFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
w w 4;QFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o }3}QFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\2}?PCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b@- Roll in CentOS Brandingy1kPFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|6uQFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm5UQFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l y9kQFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\83QFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ7QFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
\<}?QCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[- Roll in CentOS Branding|;qQFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginy:kQFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
d d |?uRFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm>URFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. =;RFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
l yBkRFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\A3RFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ@RFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
|DqRFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginyCkRFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group
aF;RFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA configVE%RFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file
|HuSFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmGUSFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l yKkSFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\J3SFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differISFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
|MqSFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginyLkSFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group
8 8 PSFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leakaO;SFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA configVN%SFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file
l ySkTFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\R3TFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differQTFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
|UqTFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginyTkTFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group
Z 8 Z \Z}?TCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.16e- Roll in CentOS Branding|YsTFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\- Resolves: RHEL-12570 ipa: Invalid CSRF protectionXTFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leakaW;TFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA configVV%TFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file
y]kUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupy\kUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\[3UFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ
V_%UFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file|^qUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin
W \d}?UCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.17ff- Roll in CentOS Branding8cw{UJulien Rische <jrische@redhat.com> - 4.6.8-5.el7_9.17f_- Resolves: RHEL-29926 ipa: user can obtain a hash of the passwords of all domain users and perform offline brute force|bsUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\- Resolves: RHEL-12570 ipa: Invalid CSRF protectionaUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leaka`;UFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA config
e r+V: e Db
5eee4ed6f4cdcbe1b9de452b76bc924f965eab492a06b0b7f5bb0bbb156d824fDa
c59e261df9c78880ac906231fc2cce51d269a2a4bdd58d5cccea75abe0465c0bD`
558dc0f83e3862c9b965afa5b391a230262f95f6a63563d97c9110ca4deccd16D_
d91d835f435d138d7db35fab1aba38aaba2d467d57ccdc15593e6e37665d9e9dD^
0c844b3fd55943ad6df491c0f9396667119e7d8f737d079ca70e1e354c04d769D]
7dfa4db17abc05d6bf097a9695e02d8f0889d219fe48c90d147cef40ee6a34e0D\
833dc73a5ec23e1c5d73db93091846da2a990c4c750e903a4a09f3a61282dab0D[
779491f4aff62cb66747a794b7b823e9645eed730e157ff87a8425bfd96871c9DZ
509cf9ac14798ddb50f8710817ee91492ef1e1b1a27d3921e30b5434858dc294DY
8b49fbdabac5e8dd32d8de8826af7fee4b0eeab0828f5ad71004efba08ce1b40DX
74fb87c43d42d2e134909edffc5d2d759fa9ac176e342697b6d590d62ca8a11fDW
2310b0e53fdf17749832f558cf06510e127435a1cce7658a84665de1bf9fa2e7DV
08dfe3130e723092bcc8145c8b90e71cc35804a68abc5879143350368fece38b
X X gVFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa Pf#VFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
- trust upgrade: ensure that host is member of adtrust agentsaeEVFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
- CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
- Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
- Make sure to have storage space for tag -server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss d when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
oh}cVFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!i}GVFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } j}VFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y m;VFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o }l}VFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvk}qVFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
_ _ pWFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa Po#WFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
- trust upgrade: ensure that host is member of adtrust agents[n{?VCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P- Roll in CentOS Branding -server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss d when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
oq}cWFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!r}GWFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } s}WFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y v;WFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o }u}WFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvt}qWFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
B B yXFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa [x{?WCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`- Roll in CentOS BrandingmwUWFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. -server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss d when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
oz}cXFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!{}GXFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } |}XFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y ;XFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o }~}XFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv}}qXFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
2 2 [{?XCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`[- Roll in CentOS Branding|uXFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm UXFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
o}cYFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!}GYFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } }YFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y ;YFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o }}YFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv}qYFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|
uYFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm UYFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l !
}GZFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords[ {?YCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`- Roll in CentOS Branding YFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
} } }ZFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y ;ZFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o }}ZFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv}qZFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|uZFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmUZFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
. l. [{?ZCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex- Roll in CentOS Branding\3ZFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differZFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
} } }[Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y ;[Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o }}[Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv}q[Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
| u[Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmU[Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l y k[Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\ 3[Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ [Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
& '& }"}\Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv!}q\Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue\ }?[CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a*@- Roll in CentOS Branding ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
d d |%u\Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm$U\Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. #;\Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
l y(k\Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\'3\Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ&\Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
w w ,;]Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o ˁ}+}]Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\*}?\CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b@- Roll in CentOS Brandingy)k\Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group of
!flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| D F H K M P S U Z ] _ d g h i j m p q r s v y z { |
" % ( , . 1 4 7 : < > @ C E H K M R U W \ _ ` a b e h i j k n q r s t w z { | }
$
&
)
,
/
2
4
6
8
;
=
@
C
E
J ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|.u]Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm-U]Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l y1k]Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\03]Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ/]Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
\4}?]CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[- Roll in CentOS Branding|3q]Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginy2k]Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
d d |7u^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm6U^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. 5;^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
l y:k^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\93^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ8^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
|<q^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginy;k^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group
a>;^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA configV=%^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file
|@u_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm?U_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l yCk_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\B3_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differA_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
|Eq_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginyDk_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group
8 8 H_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leakaG;_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA configVF%_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file
l yKk`Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\J3`Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differI`Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
|Mq`Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginyLk`Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group
Z 8 Z \R}?`CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.16e- Roll in CentOS Branding|Qs`Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\- Resolves: RHEL-12570 ipa: Invalid CSRF protectionP`Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leakaO;`Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA configVN%`Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file
yUkaFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupyTkaFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\S3aFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ
VW%aFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file|VqaFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin
W \\}?aCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.17ff- Roll in CentOS Branding8[w{aJulien Rische <jrische@redhat.com> - 4.6.8-5.el7_9.17f_- Resolves: RHEL-29926 ipa: user can obtain a hash of the passwords of all domain users and perform offline brute force|ZsaFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\- Resolves: RHEL-12570 ipa: Invalid CSRF protectionYaFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leakaX;aFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA config
X X _bFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa ߁P^#bFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
- trust upgrade: ensure that host is member of adtrust agentsa]EbFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
- CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
- Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
- Make sure to have storage space for tag -server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss d when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
o`}cbFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!a}GbFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } b}bFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y e;bFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o }d}bFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvc}qbFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
_ _ hcFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa Pg#cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
- trust upgrade: ensure that host is member of adtrust agents[f{?bCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P- Roll in CentOS Branding
e r+V: e Do
96d4abfe67bd7a9d955276cf0a4e0987e05c018e86c09903e0f0417e753e77acDn
8087b4408319998ae1d6b166c84ecab64a54cea6ca23c0fa10d0108446ac99c1Dm
e7250202a7c16893d5954675d11df0fab80808b7c4c5c285328f1c4315027ceeDl
017eff95084da1072645aceed55c7d64fe45d437ca48fa5ec6446759047a4d0dDk
708df0316ccfbaa7713f5cc4d0174450936ff711924ac55e5527b630498ef3d4Dj
a7f79e36bdad845ee95ab0dcf81c2ac21d35da133b48c0cb448fbd6f1f3a5ceaDi
acedb410f50fe7ddd7938fec4bc88806e9f316f2c58569efa76c504f5ef11916Dh
4206286662c3bca7d5dec45b6571835c5c580374921fcc382635bbf1caddac77Dg
9a646552f12a087de4493fe8a4dfec0a5fb87521f568758c6136443c9644c22fDf
8089409b82d6904e6a2853e0d520b54e8935468e99ddd4cec8394dcee0e731d7De
bbc75e7ebe20ce9f9b3a0c5ed5ebce0ec757c6a71b928408b3219bb857294882Dd
f07e21fd43e16c0797d167891e1f8dd87c7bcf4ac4177307aec21e25a55ece03Dc
ef279f239f0fe62929c62165d00a4076c51667ba82c640a3790df88dfa67ffa1 -server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss d when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
oi}ccFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!j}GcFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } k}cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y n;cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o }m}cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvl}qcFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
B B qdFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa [p{?cCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`- Roll in CentOS BrandingmoUcFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. -server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss d when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
or}cdFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!s}GdFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } t}dFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y w;dFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o }v}dFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvu}qdFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
2 2 [z{?dCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`[- Roll in CentOS Branding|yudFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmxUdFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
o{}ceFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!|}GeFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } }}eFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y ;eFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o }}eFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv~}qeFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|ueFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmUeFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l !}GfFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords[{?eCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`- Roll in CentOS BrandingeFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
} } }fFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y ;fFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
}}fFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv}qfFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
| ufFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm
UfFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
. l. [{?fCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex- Roll in CentOS Branding\
3fFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ fFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
} } }gFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y ;gFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
}}gFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv}qgFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|ugFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmUgFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l ykgFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\3gFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differgFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
& '& }}hFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv}qhFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue\}?gCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a*@- Roll in CentOS Branding ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
d d | uhFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm UhFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. ;hFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
l y khFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\ 3hFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ hFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
w w $;iFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
}#}iFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\"}?hCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b@- Roll in CentOS Brandingy!khFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|&uiFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm%UiFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l y)kiFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\(3iFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ'iFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
\,}?iCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[- Roll in CentOS Branding|+qiFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginy*kiFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
d d |/ujFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm.UjFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. -;jFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
l y2kjFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\13jFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ0jFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
|4qjFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginy3kjFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group
a6;jFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA configV5%jFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file
|8ukFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm7UkFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l y;kkFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\:3kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ9kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
|=qkFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginy<kkFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group
8 8 @kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leaka?;kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA configV>%kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file
l yCklFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\B3lFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differAlFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
|EqlFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginyDklFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group
Z 8 Z \J}?lCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.16e- Roll in CentOS Branding|IslFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\- Resolves: RHEL-12570 ipa: Invalid CSRF protectionHlFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leakaG;lFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA configVF%lFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file
yMkmFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupyLkmFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\K3mFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ
VO%mFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file|NqmFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin
W \T}?mCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.17ff- Roll in CentOS Branding8Sw{mJulien Rische <jrische@redhat.com> - 4.6.8-5.el7_9.17f_- Resolves: RHEL-29926 ipa: user can obtain a hash of the passwords of all domain users and perform offline brute force|RsmFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\- Resolves: RHEL-12570 ipa: Invalid CSRF protectionQmFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leakaP;mFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA config
X X WnFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa
%PV#nFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
- trust upgrade: ensure that host is member of adtrust agentsaUEnFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
- CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
- Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
- Make sure to have storage space for tag
&-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss
'd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
oX}cnFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!Y}GnFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } Z}nFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y ];nFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
,}\}nFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv[}qnFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
_ _ `oFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa
.P_#oFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
- trust upgrade: ensure that host is member of adtrust agents[^{?nCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P- Roll in CentOS Branding
/-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss
0d when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
oa}coFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!b}GoFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } c}oFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y f;oFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
5}e}oFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvd}qoFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
B B ipFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa
8[h{?oCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`- Roll in CentOS BrandingmgUoFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
e r+V: e D|
951d300e30de3f44fa83fea5bff378fb53589245060530b325e00fa9f6c7f5d3D{
13e6e0aca27ac928a13a8392353c51dcc310d1458f84cf2c8811620996c73fc2Dz
065be8dcad1accb013d907c343f946bf2aee0c7ebe74cc8d43c80d008e10fed5Dy
d2df50179ec4ae53b3b02398bb8ed1d376fddb157a0b2c4996e0c09559793409Dx
3268859dec4857e91df2b98be2c4c1039a81c1208032d1627ffafee642953fc2Dw
9fe30f8f94bda5cdd5390de29d8a6c4c8f6dbbb9aeec90fb2dbf9da761d3e515Dv
9277a339164ce4554d7e44a5274d72e8acdef0f65c7e2f5ae1558953312edbfcDu
f3480d9490430ccdec35a8db1fdcd4f48fc92476fd17dea7b616fd9995372e88Dt
6fc0812fc250d841a58cd125c88d60ba6c53d4c751c3c985ba925f28e597e5adDs
47f19899e75c7c9a5b74f30643d69d0ccff2cf5451546d7ad1a727bccaaf0ea4Dr
ceba479b3f7e61b1f98d50e4797543b538d563b420b419155fedeead08a06b2eDq
d2db9132b158642ca3acdce95a3018565ff05f4497c6fa76140e7a98a3a959f3Dp
3bc9984dc4e0e90245e74d760cf04b6707669b3289dc3e70c040cdfde4d44319
9-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss
:d when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
oj}cpFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!k}GpFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } l}pFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y o;pFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
?}n}pFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvm}qpFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
2 2 [r{?pCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`[- Roll in CentOS Branding|qupFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmpUpFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
os}cqFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!t}GqFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } u}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y x;qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
E}w}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvv}qqFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|zuqFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmyUqFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l !}}GrFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords[|{?qCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`- Roll in CentOS Branding{qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
} } ~}rFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y ;rFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
J} }rFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv}qrFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|urFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmUrFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
. l. [{?rCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex- Roll in CentOS Branding\3rFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differrFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
} } }sFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y
;sFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
O} }sFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv}qsFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
| usFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm UsFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l yksFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\3sFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ
sFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
& '& }}tFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv}qtFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue\}?sCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a*@- Roll in CentOS Branding ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
d d |utFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmUtFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. ;tFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
S
l yktFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\3tFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differtFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
w w ;uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
W}}uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\}?tCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b@- Roll in CentOS BrandingyktFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
| uuFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm UuFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l y!kuFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\ 3uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
\$}?uCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[- Roll in CentOS Branding|#quFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginy"kuFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
d d |'uvFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm&UvFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. %;vFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
[
l y*kvFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\)3vFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ(vFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
|,qvFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginy+kvFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group
a.;vFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA configV-%vFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file
|0uwFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm/UwFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l y3kwFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\23wFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ1wFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
|5qwFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginy4kwFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group of
flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv|
"O
#T
$W
(X
)Y
*Z
+]
-`
1a
2b
3c
4f
6i
;j
<k
=l
>o
@r
As
Bt
Cu
Dx
Fz
G}
H~
I
K
L
M
N
P
Q
R
T
U
V
X
Y!
Z$
\'
]*
^,
_.
`0
a3
b5
d8
e;
f=
gB
hE
iG
jL
kO
oP
pQ
qR
rU
tX
xY
yZ
z[
{^
}a
b
c
d
g
j
k
l
m
p
r
u
v
y
{
~
"
$
&
(
+
-
0
3
5
:
=
?
D
G
H
I
J
M
P
Q
8 8 8wFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leaka7;wFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA configV6%wFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file
l y;kxFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\:3xFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ9xFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
|=qxFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginy<kxFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group
Z 8 Z \B}?xCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.16e- Roll in CentOS Branding|AsxFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\- Resolves: RHEL-12570 ipa: Invalid CSRF protection@xFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leaka?;xFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA configV>%xFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file
yEkyFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupyDkyFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\C3yFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ
VG%yFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file|FqyFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin
W \L}?yCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.17ff- Roll in CentOS Branding8Kw{yJulien Rische <jrische@redhat.com> - 4.6.8-5.el7_9.17f_- Resolves: RHEL-29926 ipa: user can obtain a hash of the passwords of all domain users and perform offline brute force|JsyFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\- Resolves: RHEL-12570 ipa: Invalid CSRF protectionIyFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leakaH;yFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA config
X X OzFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa
lPN#zFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
- trust upgrade: ensure that host is member of adtrust agentsaMEzFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
- CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
- Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
- Make sure to have storage space for tag
m-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss
nd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
oP}czFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!Q}GzFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } R}zFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y U;zFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
s}T}zFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvS}qzFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
_ _ X{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa
uPW#{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
- trust upgrade: ensure that host is member of adtrust agents[V{?zCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P- Roll in CentOS Branding
v-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss
wd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
oY}c{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!Z}G{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } [}{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y ^;{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
|}]}{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv\}q{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
B B a|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa
~[`{?{CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`- Roll in CentOS Brandingm_U{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss
d when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
ob}c|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!c}G|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } d}|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y g;|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
}f}|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetve}q|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
2 2 [j{?|CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`[- Roll in CentOS Branding|iu|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmhU|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
e r+V: e D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~
7bfce38ec77185d1696e388cecf4163509c7884933ded369897a1fcf77610b49D}
da1dc98d83517de259389f28cb15535a0c5b895342f95881d9cdb88529401e7a
ok}c}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!l}G}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } m}}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y p;}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
}o}}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvn}q}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|ru}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmqU}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l !u}G~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords[t{?}CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`- Roll in CentOS Brandings}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
} } v}~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y y;~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
}x}~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvw}q~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|{u~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmzU~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
. l. [~{?~CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex- Roll in CentOS Branding\}3~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ|~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
} } }Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y ;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
}}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv }qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l ykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
& '& }
}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv }qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue\}?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a*@- Roll in CentOS Branding ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
d d |
uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm UFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. ;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
l ykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
w w ;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
}}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\}?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b@- Roll in CentOS BrandingykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l ykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
\ }?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[- Roll in CentOS Branding|qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
d d | uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm UFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. ;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
l y"kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\!3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
|$qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginy#kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group
a&;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA configV%%Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file
|(uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm'UFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l y+kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\*3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ)Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
|-qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginy,kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group
8 8 0Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leaka/;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA configV.%Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file
l y3kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\23Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ1Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
|5qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync pluginy4kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host group
Z 8 Z \:}?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.16e- Roll in CentOS Branding|9sFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\- Resolves: RHEL-12570 ipa: Invalid CSRF protection8Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leaka7;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA configV6%Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file
y=kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupy<kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\;3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ
V?%Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file|>qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin
W \D}?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.17ff- Roll in CentOS Branding8Cw{Julien Rische <jrische@redhat.com> - 4.6.8-5.el7_9.17f_- Resolves: RHEL-29926 ipa: user can obtain a hash of the passwords of all domain users and perform offline brute force|BsFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\- Resolves: RHEL-12570 ipa: Invalid CSRF protectionAFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leaka@;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA config
X X GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa
PF#Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
- trust upgrade: ensure that host is member of adtrust agentsaEEFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
- CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
- Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
- Make sure to have storage space for tag
-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss
d when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
oH}cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!I}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } J}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y M;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
}L}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvK}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
_ _ PFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa
PO#Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
- trust upgrade: ensure that host is member of adtrust agents[N{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P- Roll in CentOS Branding
-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss
d when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
oQ}cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!R}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } S}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y V;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
}U}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvT}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
B B YFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa
[X{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`- Roll in CentOS BrandingmWUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss
d when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
oZ}cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
![}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } \}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y _;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
ˁ}^}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv]}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
2 2 [b{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`[- Roll in CentOS Branding|auFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm`UFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
oc}cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!d}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
} } e}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y h;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
с}g}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvf}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|juFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmiUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l !m}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords[l{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`- Roll in CentOS BrandingkFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
e r+V: e D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 pi winsx} &,28>DJPV\bhntz
"(.4:@FLRX^djpv| 9 : o* 8 F T b p 2~ ] m % 2 ? L ԁY f s .
C X' m4 A N [ Âh ׂu -) C6 XC mP ] j w n + 8 =E YR _ l y ȅ - *: JG T a n { ҆ " */ C< [I sV c p } և
$ 1 9> QK iX e r Lj& Ԉ3 @ M Z g !t ) E g ( 5 B O ĉ\ ؉i v
&
:*
O7
eD
Q
^
k
ӊx
% ?, [9 y* %'*06<BHNTZ`flrx~ &,28>DJPV\bhntz
"(.4:@FLRX^djpv| S ` m z Ԍ ! . D; YH lU b o
7|
ԍ $# s0 = ̍J W d q 7~ R s % Ԏ2 ? .L nY f ʎs &
g ' 4 A -N [[ h u C q) 6 C P ] >j iw + 98 `E R _ ܑl y 4 W | - Ӓ: G *T Ca n { h ̓ 9" / < yI ΓV >c p } s
۔ =$ 1 > yK X Ce r { !E& !3 ""@ "BM "`Z "sg "t " " "ɖ "( # 5 #9B #lO #\ #ϖi $v $X $~ $ $* $7 $ԗD $Q $^ %k
} } n}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y q;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
ف}p}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvo}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|suFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmrUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
. l. [v{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex- Roll in CentOS Branding\u3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differtFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
} } w}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
Y Y z;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
ށ}y}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvx}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
||uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm{UFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
l ykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role\~3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
# %# }}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue\ }?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a*@- Roll in CentOS Branding ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
a a |uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. ;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
k \3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
" $ " } }Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\
}?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b@- Roll in CentOS Brandingy kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
a a |uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm
UFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. ;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
k \3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
ykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role
r r ;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
\}?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[- Roll in CentOS Branding|qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
k \3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
ykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role
V %Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file| qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin
( | uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm UFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.a ;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA config
k \"3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ!Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
y$kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupy#kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role
V&%Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file|%qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin
\*3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ)Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server(Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leaka';Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA config
y,kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupy+kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role
V.%Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file|-qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin
\33Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ\2}?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.16e- Roll in CentOS Branding|1sFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\- Resolves: RHEL-12570 ipa: Invalid CSRF protection0Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leaka/;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA config
y5kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupy4kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role
V7%Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file|6qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin eS JSY_ekqw} $+29@GNU\cjqx '.5<CJQX_fmt{
S
V
Y
Z
[
\
_
b
c
d
e
h
j
m
n
q
s
v
w
z
|
၀
䁀
偀
灀
聀
遀
ꁀ
쁀
큀
"
$
&
*
,
.
3
5
7
<
? @ A B E H I
J K N Q R S T W Z [ \ ] ` b e f i "k #n %o &r (t )v *y +{ -} . / 1 2 3
4
6 7 8 9 : ; < = >" ?$ @& A+ B- C/ D4 E7 I8
S \<}?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.17ff- Roll in CentOS Branding8;w{Julien Rische <jrische@redhat.com> - 4.6.8-5.el7_9.17f_- Resolves: RHEL-29926 ipa: user can obtain a hash of the passwords of all domain users and perform offline brute force|:sFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\- Resolves: RHEL-12570 ipa: Invalid CSRF protection9Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leaka8;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA config
U U ?Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa
P>#Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
- trust upgrade: ensure that host is member of adtrust agentsa=EFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
- CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
- Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
- Make sure to have storage space for tag
-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss
d when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
o@}cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!A}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
| | B}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
V V E;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o }D}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvC}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
\ \ HFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa PG#Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
- trust upgrade: ensure that host is member of adtrust agents[F{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P- Roll in CentOS Branding -server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss d when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
oI}cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!J}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
| | K}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
V V N;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o
}M}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvL}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
? ? QFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa [P{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`- Roll in CentOS BrandingmOUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. -server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss d when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
oR}cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!S}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
| | T}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
V V W;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o }V}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvU}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
/ / [Z{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`[- Roll in CentOS Branding|YuFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmXUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
o[}cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!\}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
| | ]}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
V V `;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o }_}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv^}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|buFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmaUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
k !e}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords[d{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`- Roll in CentOS BrandingcFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
| | f}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
V V i;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o !}h}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvg}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|kuFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmjUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
+ k+ [n{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex- Roll in CentOS Branding\m3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differlFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
e r+V: e D#
58790e773666a310f1c4417f46de1fb127437bce225ed0d9cbf6b4a08054ae98D"
d315bb2c28ee908b28dcdf583c02c6e2135a1e2a504eab6b1b0b1ea2366cd38cD!
78d5b1f2129f41fe187e0ac04949364deea63d749d50862bb7767f1e00444a71D
5dd078d9c34f67aacb48cc5f22103833d14b4bfa4bc86f6a4d5ba09de9cdbdcbD
e0fb73f01affcb06ca29acf2c378ce6d3035f42a90552ed157bd34ccf137226fD
6dcf38b2dd21eea79940f1fdaf48332d6c3ecaa1fd0add17464537dd24fef021D
fe59e0e08fdd30fac03b78e5e5afd3169677c15d89d0797bddd5d5e796f2e43aD
06e8b2bd304cd09ba4be27cd71f6e46da23994939ba405275e37c1d39b91f75bD
f2a56e1e7ae1606a974d68a45c31824b05cfcb8ff28d94b4d090080e6e76c3a7D
5e7f113d0a50e93468c406b83d0079441feedc8fdc94a3867761526c5cf7b4adD
724104b78d65c37a7c944beaca3bddc2e94e0e2766838104816b951ec6b107c5D
133710e665511ae5f9d0928eba116d6f2d1f06f71afbe0e7013e3d46a1238e21D
878d2dbcd884adb9e2de690242d04710df89bee67b51aa86e9468e01de78341b
| | o}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
V V r;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o '}q}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvp}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|tuFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmsUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
k \v3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differuFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
" vy}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue\x}?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a*@- Roll in CentOS BrandingywkFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role
{;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o ,}z}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|}uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm|UFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
k \3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
" $ " }}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\}?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b@- Roll in CentOS BrandingykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupy kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
a a |uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. ;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o 0
k \3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
y
kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupy kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role
r r
;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o 5\ }?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[- Roll in CentOS Branding| qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
k \3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
ykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role
V%Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file|qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin
( |uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.a;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA config
k \3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
y kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role
V %Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file| qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin
\"3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ!Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leaka ;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA config
y$kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupy#kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role
V&%Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file|%qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin
\+3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ\*}?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.16e- Roll in CentOS Branding|)sFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\- Resolves: RHEL-12570 ipa: Invalid CSRF protection(Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leaka';Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA config
y-kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupy,kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role
V/%Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file|.qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin
S \4}?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.17ff- Roll in CentOS Branding83w{Julien Rische <jrische@redhat.com> - 4.6.8-5.el7_9.17f_- Resolves: RHEL-29926 ipa: user can obtain a hash of the passwords of all domain users and perform offline brute force|2sFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\- Resolves: RHEL-12570 ipa: Invalid CSRF protection1Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leaka0;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA config
U U 7Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa FP6#Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
- trust upgrade: ensure that host is member of adtrust agentsa5EFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
- CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
- Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
- Make sure to have storage space for tag G-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss Hd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
o8}cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!9}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
| | :}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
V V =;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o M}<}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv;}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
\ \ @Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa OP?#Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
- trust upgrade: ensure that host is member of adtrust agents[>{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P- Roll in CentOS Branding P-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss Qd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
oA}cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!B}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
| | C}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
V V F;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o V}E}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvD}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
? ? IFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa X[H{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`- Roll in CentOS BrandingmGUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. Y-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss Zd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
oJ}cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!K}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
| | L}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
V V O;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o _}N}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvM}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
/ / [R{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`[- Roll in CentOS Branding|QuFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmPUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
oS}cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!T}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
| | U}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
V V X;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o e}W}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvV}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|ZuFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmYUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
k !]}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords[\{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`- Roll in CentOS Branding[Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
| | ^}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
V V a;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o j}`}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv_}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|cuFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmbUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
+ k+ [f{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex- Roll in CentOS Branding\e3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differdFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
| | g}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
V V j;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o o}i}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvh}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|luFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmkUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
k \n3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differmFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
" vq}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue\p}?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a*@- Roll in CentOS BrandingyokFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role
e r+V: e D0
76813e1abc18c641eb46092531885c18b9c6ddd5e9dc4e228b79d8c1701b18aaD/
3b2f3d7b1d885c5edc646e442aa9d94f1445bf4eedc14e0b85c4b0d8f69524a8D.
dab287aa189bc4e289c79998917467ba4a97037e00fe28be6d93e2537aed7bb7D-
98fb1fad0191aec5d51055b0a98b319339dfdb3295a687465da5a1122d7998b7D,
4f37e8e35d62af3023fa7e8393ded5ec181f09c19bbdf8f8210919d800c883acD+
97cdaffa439041e92b0a8642fd10637591e412ee471c5dd1572dd88e2d6decc7D*
78c54e3e24da878a2395d1db2fe940598eade355a2ed7955fe408e1151a3bdebD)
b98e50cb5344b27eeecb7c8f6a0bd8ae65ea51bfc626a744f6d64347692558a8D(
bdfe37339f1054699a6343f8d578f712a70a609276a9b8ed1eee991f37771614D'
3a9e272508ed53c6c3ca36cc4d1c537b9a6096425aa6339399939cfb7a44d1c2D&
c8dfb7c69048e40d89f055121f7bf399c85c51f08160824fe50d9434c253a4a3D%
50b41570ec21f348d3c7adf1b62909fcf0674e4f13126166d7667664345d4f42D$
908fa60367f005eeb06ef2422874df47c562ea782942062b68547373fdaa4040
s;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o u}r}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|uuFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmtUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
k \w3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differvFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
" $ " }{}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\z}?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b@- Roll in CentOS BrandingyykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupyxkFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
a a |~uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionm}UFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. |;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o y
k \ 3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
ykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role
r r ;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o ~\}?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[- Roll in CentOS Branding|qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
k \ 3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
y kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupy
kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role
V
%Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file| qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin
( |uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.a;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA config bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ K: L= N@ RA SB TC UF WI [J \K ]L ^O `R aS bT cU dX fZ g] h^ ia kc lf mg nj pl qn rq ts vu ww x{ z~ { | }
# % ' , / 0 1 2 5 8 9 : ; > A B C D G J K L M P R U V Y [ _ e k r y # Á) ā/ Ł5 Ɓ; ǁB ȁI ɁO ʁV ˁ\ ́b
k \3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
ykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role
V%Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file|qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin
\3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA serverFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leaka;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA config
y kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupykFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role
V %Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file| qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin
\#3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ\"}?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.16e- Roll in CentOS Branding|!sFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\- Resolves: RHEL-12570 ipa: Invalid CSRF protection Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leaka ;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA config
y%kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
- WebUI: Add confirmation dialog for changing default user/host groupy$kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role
V'%Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
- Defer creating the final krb5.conf on clients
- Move client certificate request after krb5.conf is created
- server install: remove error log about missing bkup file|&qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
- idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
- ipa otptoken-sync: return error when sync fails
- ipatests: add negative test for otptoken-sync
- ipatests: python2 does not support f-strings
- Fix otptoken_sync plugin
S \,}?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.17ff- Roll in CentOS Branding8+w{Julien Rische <jrische@redhat.com> - 4.6.8-5.el7_9.17f_- Resolves: RHEL-29926 ipa: user can obtain a hash of the passwords of all domain users and perform offline brute force|*sFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\- Resolves: RHEL-12570 ipa: Invalid CSRF protection)Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖- Resolves: 2209636 libipa_otp_lasttoken plugin memory leaka(;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
- ipaserver: deepcopy objectclasses list from IPA config
U U /Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa P.#Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
- trust upgrade: ensure that host is member of adtrust agentsa-EFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
- CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
- Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
- Make sure to have storage space for tag -server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss d when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
o0}cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!1}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
| | 2}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
V V 5;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o }4}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv3}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
\ \ 8Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa P7#Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
- trust upgrade: ensure that host is member of adtrust agents[6{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P- Roll in CentOS Branding -server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss d when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
o9}cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!:}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
| | ;}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
V V >;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o }=}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetv<}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
? ? AFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y@- Resolves: #1754902 - Running ipa [@{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`- Roll in CentOS Brandingm?UFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. -server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
- idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
- install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
- pkinit setup: fix regression on master install
- pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
- ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
- adtrust.py: mention restarting sss d when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
- Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
- smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
- upgrade: fix ipakra people entry 'description' attribute
- krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
- ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
- ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
- Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
- WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
- Fix indentation levels
- ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
- ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
- Don't save password history on non-Kerberos accounts
oB}cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!C}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
| | D}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
V V G;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o }F}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvE}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
/ / [J{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`[- Roll in CentOS Branding|IuFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmHUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
oK}cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd
!L}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords
| | M}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
V V P;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o }O}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvN}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|RuFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmQUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
k !U}GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
- Add interactive prompt for the LDAP bind password to ipa-getkeytab
- CVE-2020-1722: prevent use of too long passwords[T{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`- Roll in CentOS BrandingSFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
| | V}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^- Resolves: #1834385 Man page syntax issue detected by rpminspect
- Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
- Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
- ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
- Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
V V Y;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by o }X}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
- ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offsetvW}qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^3- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
- ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
- WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
|[uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`q- Resolves: #1959349 - Need to bump pki + ds versionmZUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
- ipa-kdb: fix compiler warnings
- ipa-kdb: add missing prototypes
- ipa-kdb: reformat ipa_kdb_certauth
- ipa-kdb: mark test functions as static
- ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.
k+ ~_iMichal Ruprich <mruprich@redhat.com> - 3.1.6-1X- Resolves: #913329 - [RFE] include iperf3 in RHEL 7
- initial build[^{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex- Roll in CentOS Branding\]3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
- extdom: return LDAP_NO_SUCH_OBJECT if domains differ\Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
- CA less installation: non ASCII chars in CA subject
- ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
- Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
3 A 3 e={Michal Ruprich - 3.1.7-2X@- Related: #913329 - [RFE] include iperf3 in RHEL 7
- adding requires to spec file for devel package:di
Michal Ruprich <mruprich@redhat.com> - 3.1.7-1XC- Related: #913329 - [RFE] include iperf3 in RHEL 7
- adding latest version before including iperf3 in RHEL-7~ciMichal Ruprich <mruprich@redhat.com> - 3.1.6-1X- Resolves: #913329 - [RFE] include iperf3 in RHEL 7
- initial buildb]5Stepan Broz <sbroz@redhat.com> - 3.1.7-3d@- Resolves: #2224558 - iperf3: memory allocation hazard and crash
(CVE-2023-38403)a={Michal Ruprich - 3.1.7-2X@- Related: #913329 - [RFE] include iperf3 in RHEL 7
- adding requires to spec file for devel package:`i
Michal Ruprich <mruprich@redhat.com> - 3.1.7-1XC- Related: #913329 - [RFE] include iperf3 in RHEL 7
- adding latest version before including iperf3 in RHEL-7
s2 ~kiMichal Ruprich <mruprich@redhat.com> - 3.1.6-1X- Resolves: #913329 - [RFE] include iperf3 in RHEL 7
- initial buildj]5Stepan Broz <sbroz@redhat.com> - 3.1.7-3d@- Resolves: #2224558 - iperf3: memory allocation hazard and crash
(CVE-2023-38403)i={Michal Ruprich - 3.1.7-2X@- Related: #913329 - [RFE] include iperf3 in RHEL 7
- adding requires to spec file for devel package:hi
Michal Ruprich <mruprich@redhat.com> - 3.1.7-1XC- Related: #913329 - [RFE] include iperf3 in RHEL 7
- adding latest version before including iperf3 in RHEL-7~giMichal Ruprich <mruprich@redhat.com> - 3.1.6-1X- Resolves: #913329 - [RFE] include iperf3 in RHEL 7
- initial buildf]5Stepan Broz <sbroz@redhat.com> - 3.1.7-3d@- Resolves: #2224558 - iperf3: memory allocation hazard and crash
(CVE-2023-38403)
e r+V: e D=
596e62671849cfd110b4ac4c57b171fec5bb07301be496f20b9b86d591947ebeD<
1eac2001120394176840294e989343eb699519e8284843a3cdd14f5fb3f39a95D;
7d3b3df85df3f1d47ab959aa42eea6f3302b166b9e37ef92779c1c8acedfd671D:
0e0b806579667e86ea70685a838f8c23073e5084c9c3135588b05d5d395ec9d3D9
73be1cce35dd9bd5fb59093ba5faf459b1f723fec8ccad9d13b18e6e1b249b10D8
30f252a9be101e11f5009f24025e69ac8850c0e429134629fceda20f9508a261D7
559d3f3c580f94eb5e25df5db277b1e4076d0d1911bd304941680178b21d9e5fD6
31535d62fcdd33c68d7c941c0b2b9e56b4f4749c5c04518d19b67a70214a8012D5
b4ef197940e3c4fa8fa6153875480c974b0ffa36f4534e7c04d901e91440e53cD4
514e7d973b405b3d0028fc7df9e3b46ac3dbc49e864417967dad13ed6c1a344dD3
46fcca6c6687e1d7465d0f99ea219de21f84bde74cc822721a5e55a13bf97a0cD2
e85016af12ca079ec7dcd10cfe41ca3eb0ae74f337e7db981ea8289ce132cc0bD1
1b0076a98d327d7bc0db69b985d05e02f9d0e927d5d7645ad2a14dba64ceaf52
V A[ V WreMJosef Ridky <jridky@redhat.com> - 0:1.8.18-4X+- Fix RPMDiff issues and rebuild%qegJosef Ridky <jridky@redhat.com> - 0:1.8.18-3X@- Fix issues with warning: dereferencing type-punned pointer
will break strict-aliasing rules from RPMDiffRpeCJosef Ridky <jridky@redhat.com> - 0:1.8.18-2X- Fix issue in file sources_oe]Josef Ridky <jridky@redhat.com> - 0:1.8.18-1X @- New upstream release 1.8.18 (#1398658)n]5Stepan Broz <sbroz@redhat.com> - 3.1.7-3d@- Resolves: #2224558 - iperf3: memory allocation hazard and crash
(CVE-2023-38403)m={Michal Ruprich - 3.1.7-2X@- Related: #913329 - [RFE] include iperf3 in RHEL 7
- adding requires to spec file for devel package:li
Michal Ruprich <mruprich@redhat.com> - 3.1.7-1XC- Related: #913329 - [RFE] include iperf3 in RHEL 7
- adding latest version before including iperf3 in RHEL-7
= # = RyeCJosef Ridky <jridky@redhat.com> - 0:1.8.18-2X- Fix issue in file sources xkSPavel Cahyna <pcahyna@redhat.com> - 0:1.8.18-10a{- Protect against negative values to memmove that caused
"ipmitool sol activate" to crash against an IBM DataPower appliance
(#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
Cherry-picked from upstream PR#78.iwscVáclav Doležal <vdolezal@redhat.com> - 0:1.8.18-9^_@- Disable -fstrict-aliasing (RPMDiff issue)^vsMVáclav Doležal <vdolezal@redhat.com> - 0:1.8.18-8^^F- Backport fix for CVE-2020-5208oue}Josef Ridky <jridky@redhat.com> - 0:1.8.18-7Zy- Remove debug prints shown without -v option (#1483163)te=Josef Ridky <jridky@redhat.com> - 0:1.8.18-6Y{- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)ose}Josef Ridky <jridky@redhat.com> - 0:1.8.18-5Xs- Remove RPMDiff fix file (#1439269) related to #1398658
V i scVáclav Doležal <vdolezal@redhat.com> - 0:1.8.18-9^_@- Disable -fstrict-aliasing (RPMDiff issue)^sMVáclav Doležal <vdolezal@redhat.com> - 0:1.8.18-8^^F- Backport fix for CVE-2020-5208o~e}Josef Ridky <jridky@redhat.com> - 0:1.8.18-7Zy- Remove debug prints shown without -v option (#1483163)}e=Josef Ridky <jridky@redhat.com> - 0:1.8.18-6Y{- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)o|e}Josef Ridky <jridky@redhat.com> - 0:1.8.18-5Xs- Remove RPMDiff fix file (#1439269) related to #1398658W{eMJosef Ridky <jridky@redhat.com> - 0:1.8.18-4X+- Fix RPMDiff issues and rebuild%zegJosef Ridky <jridky@redhat.com> - 0:1.8.18-3X@- Fix issues with warning: dereferencing type-punned pointer
will break strict-aliasing rules from RPMDiff
< < Qi;Sinny Kumari <skumari@redhat.com> - 2.4.11.1-1W - Resolves: #1274367 - [7.3 FEAT] iprutils package update
- Resolves: #1297921 - IPR: Raid migration fails to kick while executing through command lineJa5Jakub Čajka <jcajka@redhat.com> - 2.4.8-1UJ@- Resolves: #1182038 - [7.2 FEAT] iprutils package update - ppc64/ppc64le
- Resolves: #1183460 - RHEL7.1 BE: iprutils: Set known zeroed after formatwg Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-11d- Add upstream ipmievd patch to check received msg id against expectation
Fixes problem where SEL response is not recognized correctly
when SEL request times out
Resolves: rhbz#2224569 kSPavel Cahyna <pcahyna@redhat.com> - 0:1.8.18-10a{- Protect against negative values to memmove that caused
"ipmitool sol activate" to crash against an IBM DataPower appliance
(#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
Cherry-picked from upstream PR#78.
! L) ! i/Sinny Kumari <skumari@redhat.com> - 2.4.16.1-1[(@- Resolves: #1587834 - vpdupdate takes over an hour on system with 104 drive
- Resolves: #1521052 - iprutils package update for POWER
- Resolves: #1547891 - iprconfig unable to Download microcode on all applicable devices
- Resolves: #1576013 - iprconfig tools shows wrong error message, while creating raid using RI SSDs and normal SSDstiSinny Kumari <skumari@redhat.com> - 2.4.15.1-1Y - Resolves: #1456500 - iprutils package update to 2.4.15.1i Sinny Kumari <skumari@redhat.com> - 2.4.14.1-1X- Resolves: #1384382 - [7.4 FEAT] iprutils package update - ppc64/ppc64leiESinny Kumari <skumari@redhat.com> - 2.4.13.1-1W:- Rebase to upstream release 2.4.13.1
- Resolves: #1369259 - Fix known zeroed state tracking/iwSinny Kumari <skumari@redhat.com> - 2.4.12.1-1Wt@- Resolves: #1364131 - Integrate various important bug fixes for iprutils in
RHEL7.3 by updating iprutils to 2.4.12
p ?dx p wiChris Leech <cleech@redhat.com> - 6.2.0.874-14]x- 1598647 update boot gateway information during sync_sessioni)Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_@- 1724579 iscsiuio update, allow processing requests in DHCP failure conditiongigChris Leech <cleech@redhat.com> - 6.2.0.874-12][- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
(rec update race condition)\
iSChris Leech <cleech@redhat.com> - 6.2.0.874-11\@- 1649401, 1649413 iscsiuio updatesw [Than Ngo <than@redhat.com> - 2.4.17.1-3]9- Resolves: #1763626 - iprconfig hangs while raiding drives on crow3Y [[Than Ngo <than@redhat.com> - 2.4.17.1-2\{- Related: #1643408 - fix rpmdiff issue`
[iThan Ngo <than@redhat.com> - 2.4.17.1-1\w@- Resolves: #1643408 - iprutils package update
mn \iSChris Leech <cleech@redhat.com> - 6.2.0.874-11\@- 1649401, 1649413 iscsiuio updates}iChris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at onceiimChris Leech <cleech@redhat.com> - 6.2.0.874-19^@- 1851250 fix libiscsi for libcrypto requirement"i]Chris Leech <cleech@redhat.com> - 6.2.0.874-18^- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)Ni5Chris Leech <cleech@redhat.com> - 6.2.0.874-17]@- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value iChris Leech <cleech@redhat.com> - 6.2.0.874-16]W- upstream iscsiuio/configure.ac changes were breaking build hardeningi5Chris Leech <cleech@redhat.com> - 6.2.0.874-15]@- 1396651 Update service files, support sd_notify instead of pid files, stop forking
! y ! N i5Chris Leech <cleech@redhat.com> - 6.2.0.874-17]@- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value iChris Leech <cleech@redhat.com> - 6.2.0.874-16]W- upstream iscsiuio/configure.ac changes were breaking build hardeningi5Chris Leech <cleech@redhat.com> - 6.2.0.874-15]@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingwiChris Leech <cleech@redhat.com> - 6.2.0.874-14]x- 1598647 update boot gateway information during sync_sessioni)Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_@- 1724579 iscsiuio update, allow processing requests in DHCP failure conditiongigChris Leech <cleech@redhat.com> - 6.2.0.874-12][- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
(rec update race condition)
w Yk w w#iChris Leech <cleech@redhat.com> - 6.2.0.874-14]x- 1598647 update boot gateway information during sync_session"i)Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_@- 1724579 iscsiuio update, allow processing requests in DHCP failure conditiong!igChris Leech <cleech@redhat.com> - 6.2.0.874-12][- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
(rec update race condition)} iChris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei imChris Leech <cleech@redhat.com> - 6.2.0.874-19^@- 1851250 fix libiscsi for libcrypto requirement" i]Chris Leech <cleech@redhat.com> - 6.2.0.874-18^- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)
mn })iChris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei(imChris Leech <cleech@redhat.com> - 6.2.0.874-19^@- 1851250 fix libiscsi for libcrypto requirement"'i]Chris Leech <cleech@redhat.com> - 6.2.0.874-18^- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)N&i5Chris Leech <cleech@redhat.com> - 6.2.0.874-17]@- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value %iChris Leech <cleech@redhat.com> - 6.2.0.874-16]W- upstream iscsiuio/configure.ac changes were breaking build hardening$i5Chris Leech <cleech@redhat.com> - 6.2.0.874-15]@- 1396651 Update service files, support sd_notify instead of pid files, stop forking
c o{ c /iChris Leech <cleech@redhat.com> - 6.2.0.874-16]W- upstream iscsiuio/configure.ac changes were breaking build hardening.i5Chris Leech <cleech@redhat.com> - 6.2.0.874-15]@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw-iChris Leech <cleech@redhat.com> - 6.2.0.874-14]x- 1598647 update boot gateway information during sync_session,i)Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_@- 1724579 iscsiuio update, allow processing requests in DHCP failure conditiong+igChris Leech <cleech@redhat.com> - 6.2.0.874-12][- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
(rec update race condition) *i1Chris Leech <cleech@redhat.com> - 6.2.0.874-21a- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning
z - z 5i)Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition 4i1Chris Leech <cleech@redhat.com> - 6.2.0.874-21a- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}3iChris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei2imChris Leech <cleech@redhat.com> - 6.2.0.874-19^@- 1851250 fix libiscsi for libcrypto requirement"1i]Chris Leech <cleech@redhat.com> - 6.2.0.874-18^- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)N0i5Chris Leech <cleech@redhat.com> - 6.2.0.874-17]@- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value
m i;imChris Leech <cleech@redhat.com> - 6.2.0.874-19^@- 1851250 fix libiscsi for libcrypto requirement":i]Chris Leech <cleech@redhat.com> - 6.2.0.874-18^- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)N9i5Chris Leech <cleech@redhat.com> - 6.2.0.874-17]@- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value 8iChris Leech <cleech@redhat.com> - 6.2.0.874-16]W- upstream iscsiuio/configure.ac changes were breaking build hardening7i5Chris Leech <cleech@redhat.com> - 6.2.0.874-15]@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw6iChris Leech <cleech@redhat.com> - 6.2.0.874-14]x- 1598647 update boot gateway information during sync_session
S sk S BiChris Leech <cleech@redhat.com> - 6.2.0.874-16]W- upstream iscsiuio/configure.ac changes were breaking build hardeningAi5Chris Leech <cleech@redhat.com> - 6.2.0.874-15]@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw@iChris Leech <cleech@redhat.com> - 6.2.0.874-14]x- 1598647 update boot gateway information during sync_session?i)Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_@- 1724579 iscsiuio update, allow processing requests in DHCP failure conditionw>iChris Leech <cleech@redhat.com> - 6.2.0.874-22a^@- 1946578 fix segfault on case mismatch in config/record file =i1Chris Leech <cleech@redhat.com> - 6.2.0.874-21a- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}<iChris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at once
, - , \IiSChris Leech <cleech@redhat.com> - 6.2.0.874-11\@- 1649401, 1649413 iscsiuio updateswHiChris Leech <cleech@redhat.com> - 6.2.0.874-22a^@- 1946578 fix segfault on case mismatch in config/record file Gi1Chris Leech <cleech@redhat.com> - 6.2.0.874-21a- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}FiChris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at onceiEimChris Leech <cleech@redhat.com> - 6.2.0.874-19^@- 1851250 fix libiscsi for libcrypto requirement"Di]Chris Leech <cleech@redhat.com> - 6.2.0.874-18^- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)NCi5Chris Leech <cleech@redhat.com> - 6.2.0.874-17]@- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value
! y ! NOi5Chris Leech <cleech@redhat.com> - 6.2.0.874-17]@- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value NiChris Leech <cleech@redhat.com> - 6.2.0.874-16]W- upstream iscsiuio/configure.ac changes were breaking build hardeningMi5Chris Leech <cleech@redhat.com> - 6.2.0.874-15]@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingwLiChris Leech <cleech@redhat.com> - 6.2.0.874-14]x- 1598647 update boot gateway information during sync_sessionKi)Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_@- 1724579 iscsiuio update, allow processing requests in DHCP failure conditiongJigChris Leech <cleech@redhat.com> - 6.2.0.874-12][- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
(rec update race condition)
Yk wViChris Leech <cleech@redhat.com> - 6.2.0.874-14]x- 1598647 update boot gateway information during sync_sessionUi)Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_@- 1724579 iscsiuio update, allow processing requests in DHCP failure conditiongTigChris Leech <cleech@redhat.com> - 6.2.0.874-12][- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
(rec update race condition)\SiSChris Leech <cleech@redhat.com> - 6.2.0.874-11\@- 1649401, 1649413 iscsiuio updates}RiChris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at onceiQimChris Leech <cleech@redhat.com> - 6.2.0.874-19^@- 1851250 fix libiscsi for libcrypto requirement"Pi]Chris Leech <cleech@redhat.com> - 6.2.0.874-18^- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)
mn }\iChris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei[imChris Leech <cleech@redhat.com> - 6.2.0.874-19^@- 1851250 fix libiscsi for libcrypto requirement"Zi]Chris Leech <cleech@redhat.com> - 6.2.0.874-18^- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)NYi5Chris Leech <cleech@redhat.com> - 6.2.0.874-17]@- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value XiChris Leech <cleech@redhat.com> - 6.2.0.874-16]W- upstream iscsiuio/configure.ac changes were breaking build hardeningWi5Chris Leech <cleech@redhat.com> - 6.2.0.874-15]@- 1396651 Update service files, support sd_notify instead of pid files, stop forking
e r+V: e DJ
d4448c84868ba851628434b5cedc79248ebbc6aeda79ecb6339065c844d6d809DI
b41a681dfb0b8b82973c7815eeee4cc5e3fc5e27cb13f55d251186c29146a4f3DH
3e0a8c76f0c416e9b2f67cade48b3e2606a3fc3b47348110c033aa2cc1835a00DG
372372d382848eb9ecb5e551dd606aa646c12d3683f43b876ed5191e7a529c3eDF
77269448e020f6a70c9a9ee15224c6dffd91e47f8c5a0c05dc8281dec47ff3f1DE
447681bd8d74b001a4a5461694a948bba8dce453c2c054b8fb5d38408b7888a3DD
144001826455a5ca11b8e1701396ee66db5af5d0c7831453aba1309eb708a6c2DC
147c8de55409cc60a709e9f72364ee69759e7361564a732c0fd192e6fdd46d75DB
092cc13ed7af9de7e0332c1da0285f190396f1b75256ecd162899d06cf9b0e1aDA
d65cdceba1822f154d19bc4845ed70da24d2b51bcaadb12af03fe2668101a3eaD@
ddf90c0ec436cf18228ba0646f73776e9a121426e0c05038fb1f4378646ff646D?
e1163c5b5240558b24ddea7085492d62d63dd722ce6b4775724583c2ebcffdf2D>
a551edad1e9e549e9010c83ff60ebed361a870676f10b405c22b4a301de84699
! y ! Nbi5Chris Leech <cleech@redhat.com> - 6.2.0.874-17]@- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value aiChris Leech <cleech@redhat.com> - 6.2.0.874-16]W- upstream iscsiuio/configure.ac changes were breaking build hardening`i5Chris Leech <cleech@redhat.com> - 6.2.0.874-15]@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw_iChris Leech <cleech@redhat.com> - 6.2.0.874-14]x- 1598647 update boot gateway information during sync_session^i)Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_@- 1724579 iscsiuio update, allow processing requests in DHCP failure conditiong]igChris Leech <cleech@redhat.com> - 6.2.0.874-12][- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
(rec update race condition)
a Yk a hi)Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_@- 1724579 iscsiuio update, allow processing requests in DHCP failure conditionggigChris Leech <cleech@redhat.com> - 6.2.0.874-12][- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
(rec update race condition) fi1Chris Leech <cleech@redhat.com> - 6.2.0.874-21a- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}eiChris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at onceidimChris Leech <cleech@redhat.com> - 6.2.0.874-19^@- 1851250 fix libiscsi for libcrypto requirement"ci]Chris Leech <cleech@redhat.com> - 6.2.0.874-18^- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)
m inimChris Leech <cleech@redhat.com> - 6.2.0.874-19^@- 1851250 fix libiscsi for libcrypto requirement"mi]Chris Leech <cleech@redhat.com> - 6.2.0.874-18^- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)Nli5Chris Leech <cleech@redhat.com> - 6.2.0.874-17]@- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value kiChris Leech <cleech@redhat.com> - 6.2.0.874-16]W- upstream iscsiuio/configure.ac changes were breaking build hardeningji5Chris Leech <cleech@redhat.com> - 6.2.0.874-15]@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingwiiChris Leech <cleech@redhat.com> - 6.2.0.874-14]x- 1598647 update boot gateway information during sync_session
aS tiChris Leech <cleech@redhat.com> - 6.2.0.874-16]W- upstream iscsiuio/configure.ac changes were breaking build hardeningsi5Chris Leech <cleech@redhat.com> - 6.2.0.874-15]@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingwriChris Leech <cleech@redhat.com> - 6.2.0.874-14]x- 1598647 update boot gateway information during sync_sessionqi)Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition pi1Chris Leech <cleech@redhat.com> - 6.2.0.874-21a- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}oiChris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at once
- wziChris Leech <cleech@redhat.com> - 6.2.0.874-22a^@- 1946578 fix segfault on case mismatch in config/record file yi1Chris Leech <cleech@redhat.com> - 6.2.0.874-21a- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}xiChris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at onceiwimChris Leech <cleech@redhat.com> - 6.2.0.874-19^@- 1851250 fix libiscsi for libcrypto requirement"vi]Chris Leech <cleech@redhat.com> - 6.2.0.874-18^- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)Nui5Chris Leech <cleech@redhat.com> - 6.2.0.874-17]@- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value
f se
f " i]Chris Leech <cleech@redhat.com> - 6.2.0.874-18^- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)Ni5Chris Leech <cleech@redhat.com> - 6.2.0.874-17]@- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value ~iChris Leech <cleech@redhat.com> - 6.2.0.874-16]W- upstream iscsiuio/configure.ac changes were breaking build hardening}i5Chris Leech <cleech@redhat.com> - 6.2.0.874-15]@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw|iChris Leech <cleech@redhat.com> - 6.2.0.874-14]x- 1598647 update boot gateway information during sync_session{i)Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition
- - i)Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_@- 1724579 iscsiuio update, allow processing requests in DHCP failure conditiongigChris Leech <cleech@redhat.com> - 6.2.0.874-12][- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
(rec update race condition)\iSChris Leech <cleech@redhat.com> - 6.2.0.874-11\@- 1649401, 1649413 iscsiuio updateswiChris Leech <cleech@redhat.com> - 6.2.0.874-22a^@- 1946578 fix segfault on case mismatch in config/record file i1Chris Leech <cleech@redhat.com> - 6.2.0.874-21a- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}iChris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at onceiimChris Leech <cleech@redhat.com> - 6.2.0.874-19^@- 1851250 fix libiscsi for libcrypto requirement
m i
imChris Leech <cleech@redhat.com> - 6.2.0.874-19^@- 1851250 fix libiscsi for libcrypto requirement" i]Chris Leech <cleech@redhat.com> - 6.2.0.874-18^- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)N i5Chris Leech <cleech@redhat.com> - 6.2.0.874-17]@- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value
iChris Leech <cleech@redhat.com> - 6.2.0.874-16]W- upstream iscsiuio/configure.ac changes were breaking build hardening i5Chris Leech <cleech@redhat.com> - 6.2.0.874-15]@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingwiChris Leech <cleech@redhat.com> - 6.2.0.874-14]x- 1598647 update boot gateway information during sync_session
s s iChris Leech <cleech@redhat.com> - 6.2.0.874-16]W- upstream iscsiuio/configure.ac changes were breaking build hardeningi5Chris Leech <cleech@redhat.com> - 6.2.0.874-15]@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingwiChris Leech <cleech@redhat.com> - 6.2.0.874-14]x- 1598647 update boot gateway information during sync_sessioni)Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_@- 1724579 iscsiuio update, allow processing requests in DHCP failure conditiongigChris Leech <cleech@redhat.com> - 6.2.0.874-12][- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
(rec update race condition)}iChris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at once
z - z i)Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition i1Chris Leech <cleech@redhat.com> - 6.2.0.874-21a- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}iChris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at onceiimChris Leech <cleech@redhat.com> - 6.2.0.874-19^@- 1851250 fix libiscsi for libcrypto requirement"i]Chris Leech <cleech@redhat.com> - 6.2.0.874-18^- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)Ni5Chris Leech <cleech@redhat.com> - 6.2.0.874-17]@- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value
m i imChris Leech <cleech@redhat.com> - 6.2.0.874-19^@- 1851250 fix libiscsi for libcrypto requirement" i]Chris Leech <cleech@redhat.com> - 6.2.0.874-18^- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)N i5Chris Leech <cleech@redhat.com> - 6.2.0.874-17]@- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value iChris Leech <cleech@redhat.com> - 6.2.0.874-16]W- upstream iscsiuio/configure.ac changes were breaking build hardeningi5Chris Leech <cleech@redhat.com> - 6.2.0.874-15]@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingwiChris Leech <cleech@redhat.com> - 6.2.0.874-14]x- 1598647 update boot gateway information during sync_session
z s z $+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)Q#Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)w"iChris Leech <cleech@redhat.com> - 6.2.0.874-22a^@- 1946578 fix segfault on case mismatch in config/record file !i1Chris Leech <cleech@redhat.com> - 6.2.0.874-21a- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning} iChris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at once
/ )5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t(iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T''Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F& Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(%OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package
pM (.OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package -+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){, oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)+5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m*[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)
3 5\D 3 45Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m3[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)25Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t1iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T0'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F/ Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)
F8 Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(7OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-packageM6Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){5 oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)
' {> oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)=5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m<[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410);5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t:iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T9'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)
\ .x \ tCiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)TB'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)FA Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)1@]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)M?Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)
H `O H 1I]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)MHRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){G oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)F5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mE[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)D5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)
$ G$ L+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)QKBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)^J5Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021
/ Q5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tPiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)TO'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)FN Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(MOJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package
pM (VOJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package U+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){T oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)S5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mR[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)
3 5\D 3 \5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m[[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)Z5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tYiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)TX'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)FW Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)
F` Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(_OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-packageM^Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){] oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)
e r+V: e DW
68ad96ff2728b35a2bfef5e46685a550d379ee6937f9081450a2c2f4c5e5c68cDV
562577dc40b07d4f6bfc5f0a837b2a0772968b369b1e30f1b6c11338772ecc1aDU
0daf2f065c20c572dbd4c2cd864cef8c197f640a926ce017c7343205b4e5e77dDT
9f2c5064a36e0190d1fb7f175cee62952c7e32951856a1ec5c9a427f2148aac2DS
df41fca55a3d1bff5343ac8fd47f2dabaf9e5da86bb0851f46af715e74c7cd59DR
eeff2dd2126e05da5903de0991d891313049be87f35dda8f67c383779761163fDQ
829050a62694fea5287076cdabeec66b15fe994809fcdd5931ebb992d47fecd4DP
dd6a74f8a692f2fe556164b50fc2c03bcb46f1e09f4aa5d99bc036cfaf80970fDO
7454f4ffa83154415c00c37d9cb1e5e253feeb7dd34081b445318d2340ae4e42DN
a7388c34d0bff23da18ea8026b4ad61a7789dc2606148be90e9c8b6440e41fbdDM
f6017656fae735dfc5831c4b635cb2dda2cae8615a1d0a4b66898f7a6b9f168bDL
bbd3efd923fc7315be5c5ab97b3a2459859dcca70068d448ba1d7a8aca4b9af0DK
6d01edd55d9f52f8ba1366e53274676bc33d48854b4465e49a15f474ddd0672f
' {f oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)e5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)md[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)c5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tbiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)Ta'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)
\ .x \ tkiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)Tj'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)Fi Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)1h]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)MgRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)
H `O H 1q]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)MpRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){o oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)n5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mm[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)l5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)
$ G$ t+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)QsBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)^r5Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021
/ y5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)txiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)Tw'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)Fv Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(uOJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package
pM (~OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package }+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){| oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787){5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mz[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)
3 5\D 3 5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T 'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)
F Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-packageMRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){ oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)
' { oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)
5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m [Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410) 5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t
iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T 'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)
\ .x \ tiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)1]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)MRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)
H `O H 1]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)MRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){ oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)
$ G$ +Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)QBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)^5Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021
/ !5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T 'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)( OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package
pM (&OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package %+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){$ oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)#5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m"[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)
3 5\D 3 ,5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m+[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)*5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t)iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T('Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F' Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)
F0 Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(/OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-packageM.Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){- oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)
' {6 oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)55Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m4[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)35Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t2iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T1'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)
\ .x \ t;iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T:'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F9 Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)18]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)M7Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)
H `O H 1A]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)M@Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){? oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)>5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m=[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)<5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)
$ G$ D+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)QCBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)^B5Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021 bR 5RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ ρn Ёt сz ҁ Ӂ ԁ
Ձ ց ׁ $ ف) ځ. ہ4 ܁8 ݁> ށC ߁I L ၄Q ⁄V い\ 䁄` 恄f 灄k 聄q 遄t ꁄy 끄~ 쁅 큅 ! & , 0 6 ; A D I N T X ^ c i l q v |
$ ( . 3 9 < A F L P V [ a d i n t x !~ " # $ % & ' ( )& *+ +1 ,4 -9 .> /D 0H 1N 2S 3Y 4\
/ I5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tHiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)TG'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)FF Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(EOJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package
pM (NOJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package M+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){L oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)K5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mJ[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)
3 5\D 3 T5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mS[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)R5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tQiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)TP'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)FO Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)
FX Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(WOJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-packageMVRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){U oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)
' {^ oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)]5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m\[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)[5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tZiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)TY'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)
\ .x \ tciJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)Tb'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)Fa Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)1`]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)M_Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)
e r+V: e Dd
1316ac625663f9009c64a89e399d60b4191a5bea7e69797e85132da3ccbcbc77Dc
a714e0889c00122a44ccbbd66032e67123e1f75d8cdad594e32de4c09400de94Db
60e92e4b5eccd578699334e15aeedbd39648619e8c4fcfdafec19e48fe080697Da
c5658a365bac1d6a010849f23983b9904b689b2d9191ee2bb6e12c828ec3855dD`
973367a3a9c98b25bdcff626cce24fd23fe78725e3f446889ec5a9091fc9c005D_
21ed5458a8abe02695e7c68bd4c068debb35056a454d12b095dcc9c2dd435449D^
236b16f4eff9a720f06ea780d58be74598f1326a04d143dea2ea6a3bf5dfb061D]
467ea07622b7bd1dc0694405f23e3047a904f677d60e58b4778fc8e889c2d224D\
a746cbe3d7985ed9de3d8ea2565a0ba9d0e55c9e16d298d608b40797a31b231bD[
4bf12266defcaeaaa70a5bbe431d815b7c435f5f95d2be12d8be7de214533e53DZ
0fa3ba7dae428c14500eba9a62de5fd03fb07234b8db1fea572d45fa78f0e0d7DY
4a764611d924b3be2baab6d6ffd5fc562fe6a7c2c08cede4d58bb7259f7a0f35DX
fe20198b1c59cd2bd81f50412b770ffdbe657e59f816450e2235e0863704f4d5
H `O H 1i]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)MhRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){g oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)f5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)me[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)d5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)
$ G$ l+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)QkBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)^j5Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021
/ q5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tpiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)To'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)Fn Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(mOJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package
pM (vOJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package u+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){t oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)s5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mr[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)
3 5\D 3 |5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m{[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)z5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tyiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)Tx'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)Fw Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)
F Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-packageM~Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){} oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)
' { oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)
\ .x \ t iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T
'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)1]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)MRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)
H `O H 1]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)MRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){ oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m
[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410) 5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)
$ G$ +Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)QBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)^5Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021
/ 5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package
pM ( OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package +Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){ oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)
3 5\D 3 $5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m#[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)"5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t!iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T 'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)
F( Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)('OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-packageM&Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){% oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)
' {. oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)-5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m,[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)+5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t*iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T)'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)
\ .x \ t3iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T2'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F1 Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)10]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)M/Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)
H `O H 19]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)M8Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){7 oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)65Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m5[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)45Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)
$ G$ <+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)Q;Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)^:5Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021
/ A5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t@iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T?'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F> Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(=OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package
pM (FOJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package E+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){D oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)C5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mB[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)
3 5\D 3 L5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mK[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)J5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tIiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)TH'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)FG Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)
FP Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(OOJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-packageMNRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){M oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)
' {V oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)U5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mT[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)S5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tRiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)TQ'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)
\ .x \ t[iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)TZ'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)FY Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)1X]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)MWRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)
H `O H 1a]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)M`Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){_ oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)^5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m][Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)\5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)
$ G$ d+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)QcBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)^b5Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021
e r+V: e Dq
ed293f56a8fa1ff864e007c158a2833d672efa0618a2cd57b24f8ee570b7df80Dp
f9157874165a2f0bfd45d4225d6b6665f3447d99d8b0b7c31b884b462c45218eDo
3f3a9c60625ad194ae3406fcef007e24a583db933f244ad66404e2ce22e8628bDn
4214383e3e5d362039f4752421a5c4dd66c7a5aad772859a41684a0b984c5373Dm
b91c19d3211778e075a890f5366a6f8e279f0f8516238accd9f976e88ae5d259Dl
203db2e870a8753e2c1ba5897367c0822ee2a5c79b866fa6486effebd9f23b96Dk
c21af136e37b18345d2d844866515fe9c44bedd736b4e98701ea2e6a2210c5a4Dj
e26a698ca51f4049464d83df1c17062a826cf136c188c2d3994ed01f90974ab6Di
55b8fbe53a3211935d82bafb555f9585fbe02d4aad743ea7bfe9b68c31fff322Dh
7046aa1eabc63c20c57732ab2750fd10c21bc29fbb4198fbd9497b0323bb525dDg
71ab07234942e8c84134be2b225f1e3f417e7974f4dcf6a080e9820b68b1b81cDf
247fc0e92238ee99057179d386718ac73601d9dcbbf86ef80e98ec27d4c7d86fDe
3820c04e5244db590096c735cfebaf9c275d7ef5d644f71712940bd565f671e7
/ i5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)thiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)Tg'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)Ff Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(eOJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package
pM (nOJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package m+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){l oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)k5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mj[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)
3 5\D 3 t5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)ms[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)r5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tqiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)Tp'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)Fo Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)
Fx Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(wOJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-packageMvRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){u oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)
' {~ oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)}5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m|[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410){5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tziJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)Ty'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)
\ .x \ tiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)1 ]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)MRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)
H `O H 1 ]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)MRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){ oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)
$ G$ +Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)Q Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)^
5Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021
/ 5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(
OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package
pM (OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package +Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){ oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)
3 5\D 3 5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)
F Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)( OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-packageM Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){ oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)
' {& oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)%5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m$[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)#5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t"iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T!'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)
\ .x \ t+iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T*'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F) Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)1(]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)M'Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)
H `O H 11]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)M0Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){/ oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787).5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m-[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410),5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)
$ G$ 4+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)Q3Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)^25Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021
/ 95Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t8iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T7'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F6 Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(5OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package
pM (>OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package =+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){< oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787);5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m:[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)
3 5\D 3 D5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mC[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)B5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tAiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T@'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F? Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)
FH Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(GOJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-packageMFRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){E oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)
' {N oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)M5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mL[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)K5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tJiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)TI'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)
\ .x \ tSiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)TR'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)FQ Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)1P]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)MORado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)
H `O H 1Y]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)MXRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){W oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)V5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mU[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)T5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)
$ G$ \+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)Q[Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)^Z5Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021
/ a5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t`iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T_'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F^ Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(]OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package
pM (fOJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package e+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){d oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)c5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mb[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)
e r+V: e D~
cc95d52dd6acca1790e3c4f0dd8c26d939c93423de333d2066dece7bf767d545D}
22bfec4ae12f95ec0baa30ad642504987294442f2a28150fd5c850b8aeb04373D|
5e65bcb053440eb744a0b29be0f36cc5c82a7fab303e26ad6ee2a714bfd4651cD{
ab9a79dcba43eba518e5c0bd8261fae155c1951f0d9f9de1194a57e26a1c43f4Dz
9a949108d90656bc8587b16aed99265931bfd33e4912eebc815b4acd99d709f0Dy
e6ffa74bab49f49dde242d6ce151c85a071ed9f55bbfe61e19f182d53a82496cDx
081e9334981d1b4b5c7b0096cade8b94d105829885494e80e9e2ca16d37b30a4Dw
544b35d1b0c600d66cc166c5f116fe849ac376a65105997c84d89296afb22861Dv
48b1742bdd262f815457ccce6a8412a9c65dc9affb811fc52a31da14b7fe7f4eDu
740cba8784afe4330523ae1c3ed41bce93c5537dad8f467cf1fdc17ea21f53e1Dt
ffd9abc7bf1c18a5121be12799691f3e50e09ec00e67de327db03a1cf7a29d6cDs
9653063ff86adaa3cf63420a5d68c5ebb55e16a3bbe27a79314e37a1bf604fdfDr
bb99b24bb6932637a09babfa34970f02619096864977bef0bf48a0e701ea428a
3 5\D 3 l5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mk[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)j5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tiiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)Th'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)Fg Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)
Fp Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(oOJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-packageMnRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){m oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)
' {v oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)u5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mt[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)s5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)triJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)Tq'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)
\ .x \ t{iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)Tz'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)Fy Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)1x]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)MwRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)
H `O H 1]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)M Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){ oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)~5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m}[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)|5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)
$ G$ +Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)QBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)^5Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021
/ 5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package
pM (OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package
+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){ oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787) 5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m
[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)
3 5\D 3 5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)
F Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-packageMRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){ oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)
' { oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787) 5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m [Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)
\ .x \ t#iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T"'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F! Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)1 ]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)M Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)
H `O H 1)]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)M(Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){' oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)&5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m%[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)$5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)
$ G$ ,+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)Q+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)^*5Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021
/ 15Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t0iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T/'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F. Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(-OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package
pM (6OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package 5+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){4 oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)35Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m2[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)
3 5\D 3 <5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m;[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410):5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t9iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T8'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F7 Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)
F@ Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(?OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-packageM>Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){= oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)
' {F oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)E5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mD[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)C5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tBiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)TA'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)
\ .x \ tKiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)TJ'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)FI Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)1H]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)MGRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)
H `O H 1Q]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)MPRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){O oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)N5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mM[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)L5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)
$ G$ T+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)QSBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)^R5Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021
/ Y5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tXiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)TW'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)FV Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(UOJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package
pM (^OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package ]+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){\ oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)[5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mZ[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)
3 5\D 3 d5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mc[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)b5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)taiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T`'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F_ Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)
Fh Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(gOJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-packageMfRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){e oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)
e r+V: e D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' {n oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)m5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)ml[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)k5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tjiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)Ti'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)
\ .x \ tsi Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)Tr' Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)Fq Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)1p]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)MoRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)
H `O H 1y] Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)Mx Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){w o Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)v5 Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)mu[ Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)t5 Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)
$ G$ |+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)Q{Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)^z5 Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021
/ 5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F~ Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(}OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package
pM (OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package +Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\@- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){ oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)
3 5\D 3 5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m [Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)
5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)
F Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)(OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-packageMRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){
oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)
' { oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787)5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410)5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)tiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)
\ .x \ tiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]@- Fix missing firmware symlinks (rhbz 1783196)T'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]N@- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)F Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a] @- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)1]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)MRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)
H `O H 1!]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)M Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250){ oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_- Update Intel Bluetooth firmwares (rhbz 1895787) 5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m [Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^k@- Set higher compression (rhbz 1817410) 5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)
`T &Y)Jarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541x%YJarod Wilson <jarod@redhat.com> 22.1-3\- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426 $Y?Jarod Wilson <jarod@redhat.com> 22.1-2\- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#16874268#YJarod Wilson <jarod@redhat.com> 22.1-1\e- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274^"5Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021
u %0 u ,[OHonggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699+[CHonggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221
*[;Honggang Li <honli@redhat.com> - 22.4-4^- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482b)[mHonggang Li <honli@redhat.com> - 22.4-3^@- Restore three patches
- Resolves: rhbz#1817412
([;Honggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585V'YUJarod Wilson <jarod@redhat.com> 22.4-1]|@- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296
&2 0 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665o/ UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L. Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665- Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665
f -4 QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'3{UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#18766652 !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#18766651 !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665 bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ 6f 8l 9p :v ;{ < = > ? @ A B C# D) E, F1 G6 H< I@ JF KK LQ MT NY O^ Pd Qh Sn Ts Uy V| W X Y Z [ \ ]! ^& _, `0 a4 c6 d: e> f@ gE hG iI jN kQ lS mW n[ o^ pb qf rj tm ur vu wx x} y z { |
} ~ # ' + . 3 6 9 = @ D G J N Q T V Z ] _ a d g i m p r t
:6wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{5yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
&2 : Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665o9 UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L8 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#18766657 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665
f -> QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'={UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665< !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665; !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665
:@wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{?yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
r /; r E !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665D !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665C Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665oB UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665LA Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665
" T" -G QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'F{UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665
:IwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{HyAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
W Kz W N ! Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665M Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665oL U Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665LK Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#18766650JcAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_:- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062
f -Q Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'P{U Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665O ! Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665
:Sw Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{Ry Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
: K : :W k
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903EV
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690U{
Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#19016900Tc Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_:- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062
Aa :[ k
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903ZZ +
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_=- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903[Y -
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_@- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903:X k
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903
` ` ^7
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963k]Y
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963 \
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903
0 x 0 :b k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903:a k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903E` Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690_{
Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690
q A q f Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903:e k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903Zd + Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_=- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903[c - Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_@- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903
q :j k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081:i k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081h7 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963kgY Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963
e r+V: e D
e6bd9014923fd5db4edcfc633f2800d2d9eda0bd0b416f22bfe615c9c8abf000D
9c883d2d32a12c3f672b6e40119adf476d62ae4bacb40ce0a88634b864d19701D
bbc54477e470a694a3032e391624ba33b9753f81d283b60a19dca7c1c52b35c4D
efd5c472cec8f06ea30eaa8cef287b401fcdf4b0a30e6b2531888ea03f1f9549D
ef07f2b266e0d616931d672568f5c39d7789f51adb7332df77df77b19e7882a4D
e9fa16cde65d0d202fe417fb0585d64a534cd25d39e715a1fb32a75e6620e475D
dfee136c3e1717a2003cc2ab23a101250a304de173d85ce35e611d5481bc08efD
e43708faf11f54060a6b8d9ee565f6c43fdf9b7c1d5537257443dcfe58320462D
880ff35253177a36cd35ad8763cde4cb91281f1e945561e8856f21de6d706dbbD
bea9e14dd6778afded7cb4e5d5a5f3fa3b0fefe9bafbf913cd21dd494fc8a966D
2ef14c819a2c602bcce68d1f84b1e8143bb560f7737ba254e3b07d9c4302af67D
c5741b7e80a2b537f19292e12c2a7fc0a403f25be8a24c117ecec3e7b88a182aD
bc12fc1a4e756efa8689dfeed9925dee6bea368e4e5e865c6972641a3d1f894d
B + B dm ? Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#19380811l Y Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081k + Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081
4 A 4 r7 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201kqY Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n@- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201:p k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081:o k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081:n k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081
c Ac u +
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081:t k
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081:s k
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081
Ja :x k
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081dw ?
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#19380811v Y
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081
g A g }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`@- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024|7
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201k{Y
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n@- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201:z k
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081:y k
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081
,m r [Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea` @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809: kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809: kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809O~ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`@- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809
AR : kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809: kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`E- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809j KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809: kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`\- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809
] : kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809O Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`@- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`@- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`t- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
AJ j
KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809: kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`\- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809r [Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea` @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809:
kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809
Ak 1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`t- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395: kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809: kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`E- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809
6x " ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735
Z BPq Z 'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
dX 9 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#19997351Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735
Y Z# +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m" QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359! iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735" ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735
+m 9' iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359& iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359% iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735$'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
Y Z+ +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m* QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359) iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735"( ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735
0 0 _.AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P- Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809,'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
a B a 93 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735"2 ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#199973591 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#199973590 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359/ iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735
/ 6'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z5 +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m4 QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735
G "9 ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735_8AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P7 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
Z BPq Z ='Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z< +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m; QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359: iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
q G q Q@ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_?AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P> Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
>/ 9D iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735"C ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735
BAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=A qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
/ G'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826ZF +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929mE QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735
q G q QJ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_IAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366PH Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
>/q mN QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359M iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
LAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=K qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
!
PQ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809P'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826ZO +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929
=T qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529QS Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_RAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366
a a VAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422
Z BPq Z Z'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826ZY +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929mX QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359W iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
q G q Q] Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_\AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P[ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=^ qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
~ p ~ ma QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735 `Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
!
Pd Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809c'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Zb +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929
=g qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Qf Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_eAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366
a a iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
hAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422
g O]~ g m'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Zl +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929mk QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735,j[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383
e r+V: e D%
339e96b8a52bc311433f3ed0ce535dd62f4808232fb75bf0eaf2b4f0cd82f726D$
04a4cfccd1c263a0f3de420c2200f1e9d5485e3f5734a0c08f2c01c3be01b144D#
230daa889ac4a0bede450aeb0258b6c9db6746486271506eb2037b877bbce588D"
40afa7c237d384eb15a196fb651eecd913e28b743ba7734e05849c45323ff597D!
a58a0b8408d78f804c67f0633541c402b9020555a4986e3fde782bf8544f5f06D
e4b6df13c59f0686bb12ef575deeaeb4ba581e4d0dd1d2595bf0d7ed9ad2e65fD
e8b67a41970fcee6a5eee5fa362a4648b27e47a04ae221fba0de5f5bc2c64e37D
0ec52bd7a95347c5c330df35b5067f28cdd262383f84e176598367ad11c98a27D
4e6c5997489d089dba27aefe96602ec7208298c2e48067c3ef634fd5a6da5f0dD
7a53443e34cc7fe98a4371e9025389c86bc36e38ca424a98b85b4224bbcac1c8D
f261f44a0301705f4e2b2a56556cdb340ae2487517c8ca12013301b3a983bd58D
bd48e9a406f3a105ecd028149cc4b8df348dc33f19ec4151daa74115a22b11feD
7a967bdf7823255236452e9a45977d7f6c253c9f3c88f18a80ae1ceb606319fd
q G q Qp Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_oAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366Pn Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
rAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=q qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,t[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 sAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
0 0 _wAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366Pv Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809u'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
Y *hY
zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=y qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Qx Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,|[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 {Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
7 'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826M~ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r}gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
q G q Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422= qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
7 _ A Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366M Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
Y *hY
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422= q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,[ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f C Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rg Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
) ) _A Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366n_ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
Y *hY
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422= q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,[ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f C Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rg Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529n _ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
/ >/
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422= q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,![ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f$ C Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M# Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r"g Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n%_ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
d Q' Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529&1 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
/ >/
) Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=( q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,+[ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 * Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f. C Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M- Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r,g Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n/_ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
d d 01 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
p ,2[ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 1 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f5 C Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M4 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r3g Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n6_ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ 8 } Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#222110671 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
F ?F t:k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<9 o Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
p ,<[!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 ;!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f? C!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M> !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r=g!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n@_!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ B }!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106A1!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
t ?Ft ME "Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695tDk!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<C o!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
fF C"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191
nG_"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ I }"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106H1"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) LqA"Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319tKk"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<J o"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 N3"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%MM"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
C .C fP C#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191MO #Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695
nQ_#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ S }#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106R1#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458 bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ z | ! $ % ' ) + . / 0 2 5 6 8 : < ? @ B E F G ÁI āL ŁN ƁP ǁQ ȁS ʁV ˁX ́Z ́] _ ρb Ёd сg ҁi Ӂl Ձn ցq ׁs ہv ܁x ݁{ ށ} ⁌ が 䁌 偌
恌 灌 职 遌 ꁌ 끌 쁌" 큌% ' + / 2 6 : > A F I L Q U Y ] a e j n s w {
) ?F) VqA#Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319tUk#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<T o#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 X3#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%WM#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
\ d \ Z }$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106Y1$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) ]qA$Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319t\k$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<[ o$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 _3$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%^M$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 db ?$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965xa g$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914E`
$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
\ d \ d }%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106c1%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) gqA%Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319tfk%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<e o%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 i3%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%hM%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 dl ?%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965xk g%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914Ej
%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
e r+V: e D2
fec7ec65b7db46bf359cb0e984f68dfa1d760320e274306052a510c5d288ed1aD1
55baaa197af05067cb206423655392e7b0a52e3ee9144a1fde30de40eb599d5aD0
3f7b46638efdb99c13fe45aa513af69cad728c4ffca568196d21fed273ba7f97D/
c50443dc25797f6103ba04c6929511b3b0ddfbc2d0ba5c3b956094079715ca98D.
5aa6c18760291c5e22fa5fd2f7960f92c9547071b62e9766ae30bbe111f5e714D-
824340802392135f9a064de630acd55a619c7b8240b3aa7ae13f664637c0f023D,
2bf9825999c7f3930c1032ad0b77786e49c18ee2996e142adc2d28d3b61709edD+
3278f8dbfd0afa8e751afeffde943cb66ed2c2a57495f39ce66a95c3bf852edeD*
542eec90efcf10ac7a2c505eed834595826e5ac255df60ccfed65594368d644cD)
3a95d1dbf8e717a5e29b32daea78a11867867d80343e09ffc29f6c9dedd70720D(
4261abb467f2744c5f43003c5dff6813e00cd4a52c72325f233dddfa3008e983D'
dc69ec026bc1c217d4ab702f2ab40cc5fe01355f2ba29351877fb7a58751e541D&
0ee22c6eb0445485cec58e7d73154100a461cce8a0bf2a9e3b8350e6ad3d073e
9 9 n3&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%mM&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 ^q?&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965xp g&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914Eo
&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
K , K Ts
&Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Invoke xz in multi-threaded mode
- generate_source_tarball.sh: Add WITH_TEMP environment variable
- generate_source_tarball.sh: Multithread xz on all available cores
- generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
- generate_source_tarball.sh: Update comment about tarball naming
- generate_source_tarball.sh: Reformat comment header
- generate_source_tarball.sh: Reformat and update help output
- generate_source_tarball.sh: Do a shallow clone, for speed
- generate_source_tarball.sh: Eliminate some removal prompting
- generate_source_tarball.sh: Make tarball reproducible
- generate_source_tarball.sh: Prefix temporary direc Or &Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae!@- Update to shenandoah-jdk8u412-b01 (EA)
- Update release notes for shenandoah-8u412-b01.
- Switch to EA mode.
- Related: RHEL-30926 tory with temp-
- generate_source_tarball.sh: Remove temporary directory exit conditions
- generate_source_tarball.sh: Set compile-command in Emacs
- generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
- generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
- generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
- generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
- Use backward-compatible patch syntax
- generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
- generate_source_tarball.sh: Remove trailing period in echo
- generate_source_tarball.sh: Use long-style argument to grep
- generate_source_tarball.sh: Add license
- generate_source_tarball.sh: Add indentation instructions for Emacs
- Remove -T0 argument from systemtap tar invocation
- Related: RHEL-30926 eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
- generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
- generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
- generate_source_tarball.sh: Adapt version logic to work with 8u
- generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
- generate_source_tarball.sh: Update examples in header for clarity
- generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
- generate_source_tarball.sh: Only add --depth=1 on non-local repositories
- Move maintenance scripts to a scripts subdirectory
- icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
- jconsole.desktop.in: Restored by running icedtea_sync.sh
- policytool.desktop.in: Likewise.
- Restore IcedTea sources correctly in spec file
- discover_trees.sh: Set compile-command and indentation instruction s for Emacs
- discover_trees.sh: shellcheck: Do not use -o (SC2166)
- discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: Add authorship
- icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
- icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
- icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: Set compile-command and indentation instructions for Emacs
- openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
- openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
- generate_source_tarball.sh: Handle an existing checkout
- generate_source_tarball.sh: Sync indentation with java-21-openjdk version
- generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
- Related: RHEL-30926
8 2vg&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f@- Update to shenandoah-jdk8u412-b08 (GA)
- Update release notes for shenandoah-8u412-b08.
- Complete release note for Certainly roots
- Switch to GA mode.
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Related: RHEL-30926Du &Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf- Update to shenandoah-jdk8u412-b07 (EA)
- Update release notes for shenandoah-8u412-b07.
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- Resolves: RHEL-309267t e&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Turn off xz multi-threading on i686 as it fails with an out of memory error
- Normalise whitespace
- Move to upstr
9 9 x3'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%wM'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 ^{?'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965xz g'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914Ey
'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
K , K T}
'Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Invoke xz in multi-threaded mode
- generate_source_tarball.sh: Add WITH_TEMP environment variable
- generate_source_tarball.sh: Multithread xz on all available cores
- generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
- generate_source_tarball.sh: Update comment about tarball naming
- generate_source_tarball.sh: Reformat comment header
- generate_source_tarball.sh: Reformat and update help output
- generate_source_tarball.sh: Do a shallow clone, for speed
- generate_source_tarball.sh: Eliminate some removal prompting
- generate_source_tarball.sh: Make tarball reproducible
- generate_source_tarball.sh: Prefix temporary direc ߁O| 'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae!@- Update to shenandoah-jdk8u412-b01 (EA)
- Update release notes for shenandoah-8u412-b01.
- Switch to EA mode.
- Related: RHEL-30926 tory with temp-
- generate_source_tarball.sh: Remove temporary directory exit conditions
- generate_source_tarball.sh: Set compile-command in Emacs
- generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
- generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
- generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
- generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
- Use backward-compatible patch syntax
- generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
- generate_source_tarball.sh: Remove trailing period in echo
- generate_source_tarball.sh: Use long-style argument to grep
- generate_source_tarball.sh: Add license
- generate_source_tarball.sh: Add indentation instructions for Emacs
- Remove -T0 argument from systemtap tar invocation
- Related: RHEL-30926 eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
- generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
- generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
- generate_source_tarball.sh: Adapt version logic to work with 8u
- generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
- generate_source_tarball.sh: Update examples in header for clarity
- generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
- generate_source_tarball.sh: Only add --depth=1 on non-local repositories
- Move maintenance scripts to a scripts subdirectory
- icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
- jconsole.desktop.in: Restored by running icedtea_sync.sh
- policytool.desktop.in: Likewise.
- Restore IcedTea sources correctly in spec file
- discover_trees.sh: Set compile-command and indentation instruction s for Emacs
- discover_trees.sh: shellcheck: Do not use -o (SC2166)
- discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: Add authorship
- icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
- icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
- icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: Set compile-command and indentation instructions for Emacs
- openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
- openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
- generate_source_tarball.sh: Handle an existing checkout
- generate_source_tarball.sh: Sync indentation with java-21-openjdk version
- generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
- Related: RHEL-30926
8 2 g'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f@- Update to shenandoah-jdk8u412-b08 (GA)
- Update release notes for shenandoah-8u412-b08.
- Complete release note for Certainly roots
- Switch to GA mode.
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Related: RHEL-30926D 'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf- Update to shenandoah-jdk8u412-b07 (EA)
- Update release notes for shenandoah-8u412-b07.
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- Resolves: RHEL-309267~ e'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Turn off xz multi-threading on i686 as it fails with an out of memory error
- Normalise whitespace
- Move to upstr
&2 (Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665o U(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L (Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665 (Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665
f - Q(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'{U(Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665 !(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665 !(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665
:
w(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{ y(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
&2 )Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665o
U)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L )Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665 )Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665
f - Q)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'{U)Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665 !)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665 !)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665
:w)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{y)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
r /; r !*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665 !*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665 *Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665o U*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L *Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665
" T" - Q*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'{U*Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665
: w*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{ y*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
W Kz W " !+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665! +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665o U+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#18766650 c*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_:- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062
f -% Q+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'${U+Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665# !+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665
:'w+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{&y+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
: K : :+ k,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903E* ,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690){
,Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#19016900(c+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_:- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062
Aa :/ k,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903Z. +,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_=- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903[- -,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_@- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903:, k,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903
` ` 27,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963k1Y,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963 0 ,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903
0 x 0 :6 k-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903:5 k-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903E4 -Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#19016903{
-Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690
q A q : -Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903:9 k-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903Z8 +-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_=- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903[7 --Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_@- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903
q :> k.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081:= k.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081<7-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963k;Y-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963
B + B dA ?.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#19380811@ Y.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081? +.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081
4 A 4 F7.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201kEY.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n@- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201:D k.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081:C k.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081:B k.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081
c Ac I +/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081:H k/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081:G k/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081
Ja :L k/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081dK ?/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#19380811J Y/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081
g A g Q0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`@- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024P7/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201kOY/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n@- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201:N k/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081:M k/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081
,m rU [0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea` @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809:T k0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809:S k0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809OR 0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`@- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809
AR :Y k0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809:X k0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`E- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809jW K0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809:V k0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`\- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809
] :] k1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809O\ 1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`@- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809[1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`@- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024Z'0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`t- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
AJ ja K1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809:` k1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`\- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809r_ [1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea` @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809:^ k1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809
Ak e12Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735d'1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`t- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395:c k1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809:b k1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`E- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809
6x "j ;2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#19997359i i2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359h i2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359g i2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735f 2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735
Z BPq Z n'2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Zm +2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929ml Q2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359k i2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
e r+V: e D?
58f0137ac65f40eaa3ff281ba91bb68d78f71041a8ab7a9d08578d3ba06cc792D>
054e750bc6d0c6d60f45a6fb60b3bc08bf7902623d269b106db0969e6a028abbD=
56e522d6f6a849ac7522778022a72719f7d1b252990db7cf3bed6b06f753b096D<
4f005504d21283f588231c70d4fdfecc7393a4b60fa72b1498f6aba2985e1d0bD;
46de5f99129eb78da5ff4975f706a21b2b68e99ac0a5aba0c19ea1b67daa44c9D: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 9s i3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359r i3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359q i3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735p 3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735o13Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735
Y Zw +3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929mv Q3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359u i3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735"t ;3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735
+m 9{ i4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359z i4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359y i4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735x'3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
Y Z +4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m~ Q4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359} i4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735"| ;4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735
0 0 _A4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P 4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809 '4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
a B a 9 i5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735" ;5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#19997359 i5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359 i5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359 i5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735
/
'5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z +5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m Q5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735
G "
;6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735_ A5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P 5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
Z BPq Z '6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z +6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m Q6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359 i6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
q G q Q 6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_A6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P 6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
>/ 9 i7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735" ;7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735
6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422= q6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
/ '7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z +7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m Q7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735
q G q Q 7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_ A7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P 7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
>/q m" Q8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359! i8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422= q7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
!
P% 8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809$'8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z# +8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929
=( q8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q' 8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_&A8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366
a a *8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
)8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422
Z BPq Z .'9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z- +9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m, Q9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359+ i9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
q G q Q1 9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_0A9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P/ 9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
39Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=2 q9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
~ p ~ m5 Q:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735 49Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
!
P8 :Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#20228097':Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z6 +:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929
=; q:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q: :Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_9A:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366
a a =:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
<:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422
g O]~ g A';Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z@ +;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m? Q;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735,>[:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383
q G q QD ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_CA;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366PB ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
F;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=E q;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,H[;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 G;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
0 0 _KA<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366PJ <Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809I'<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
Y *hY
N<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=M q<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529QL <Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,P[<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 O<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
7 S'=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826MR <Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rQg<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
q G q QV =Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_UA=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366PT =Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
X=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=W q=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,Z[=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 Y=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
7 _]A>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366M\ =Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r[g=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
Y *hY
`>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=_ q>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q^ >Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,b[>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 a>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L fe C>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191Md >Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rcg>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
) ) _gA?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366nf_>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
Y *hY
j?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=i q?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Qh ?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,l[?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 k?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L fo C?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191Mn ?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rmg?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
Qq @Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529np_?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
e r+V: e DL
6982c05564f03f4db81df93b42eeb29b22e1c82675c42eaf1077f90bf1847c7aDK
2c301bfa4814d7a20e642e7fec605dacbeef49885fa13f382cd7c85e03e827dfDJ
5c3e30fe5f331dff8d929397fe55cd6da4c97325fd1c26f6c51b2567a15414e5DI
556772de85dcdb8d7bf429e3cca280e03ffdcdd1ee99bff14fef8b64b6c102a5DH
d76bb9d2f1d62a9fed452572a310fc87fca445e6330ebfd58bbedafcd6dc171bDG
6c8d7f6e3e1e16170883c18ddcbe50ef6eb86c9a8222fb7fe4f75b91670adc57DF
be2cf27ae12e4ffcf8e8d79ef82ec36c4c7d67299d1b3bf9e1ceb0325e08de8bDE
0150773cdef45797820d481008b2e7297bc32060b190f3493a27354e52ffb8baDD
f676e5412e87446863b10f16b82807f5a4324279353554edb7aeb3cfa9143061DC
a33d9ecd05eaa2248f7384075877e78357534a302081fc03a9b5f0dcc71df48fDB
06d6c8fc8acd6bccaac9dcec5bc4fadf0a2b38f66fac335962e0352a7d2bf9bfDA
60647855ba6fb280673a3654ce82ab9610ce8bcdca3ea825ad3ea4023b200fdcD@
ea3f0bb12ce7b5c386ca301b0f16f7dddafa4ed5f63b2ab2cd2fe297d066f387
/ >/
s@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=r q@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,u[@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 t@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L fx C@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191Mw @Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rvg@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
ny_@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
d Q{ AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529z1@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
/ >/
}AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=| qAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,[AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 ~AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502 bR uRY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{
" % ( * . 1 3 5 8 ; = A D F H K N P !S "V #X $Z %] &` 'b (e )g *j +l ,o -q /s 0u 1x 2y 3{ 4} 5 7 8 9 : ; <
= > ? @ A B C D E F G H" I$ J% K' L* M, N. O1 P3 Q6 R8 S; T= U@ VB WE XG \J ]L ^O _Q cT dX e\ f^ gb hf ih jm ko lq mv oy p{ q r s t
L 7 L f CAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r gAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n_AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
d d 1AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
p ,[BAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 BAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f CBAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M BAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rgBAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n
_BAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ }BAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106 1BAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
F ?F tkBAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<
oBAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
p ,[CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f CCAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rgCAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n_CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ }CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#22211061CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
t ?Ft M DAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695tkCAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106< oCAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
f CDAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191
n_DAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ }DAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106 1DAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) qADJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319t kDAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106< oDAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 "3DAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%!MDAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
C .C f$ CEAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M# EAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695
n%_EAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ ' }EAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106&1EAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) *qAEJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319t)kEAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<( oEAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 ,3EAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%+MEAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
\ d \ . }FAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106-1FAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) 1qAFJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319t0kFAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</ oFAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 33FAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%2MFAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 d6 ?FAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965x5 gFAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914E4
FAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
\ d \ 8 }GAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#222110671GAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) ;qAGJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319t:kGAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<9 oGAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 =3GAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%<MGAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 d@ ?GAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965x? gGAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914E>
GAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
9 9 B3HAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%AMHAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 ^E?HAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965xD gHAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914EC
HAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
K , K TG
HThomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Invoke xz in multi-threaded mode
- generate_source_tarball.sh: Add WITH_TEMP environment variable
- generate_source_tarball.sh: Multithread xz on all available cores
- generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
- generate_source_tarball.sh: Update comment about tarball naming
- generate_source_tarball.sh: Reformat comment header
- generate_source_tarball.sh: Reformat and update help output
- generate_source_tarball.sh: Do a shallow clone, for speed
- generate_source_tarball.sh: Eliminate some removal prompting
- generate_source_tarball.sh: Make tarball reproducible
- generate_source_tarball.sh: Prefix temporary direc YOF HAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae!@- Update to shenandoah-jdk8u412-b01 (EA)
- Update release notes for shenandoah-8u412-b01.
- Switch to EA mode.
- Related: RHEL-30926 tory with temp-
- generate_source_tarball.sh: Remove temporary directory exit conditions
- generate_source_tarball.sh: Set compile-command in Emacs
- generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
- generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
- generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
- generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
- Use backward-compatible patch syntax
- generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
- generate_source_tarball.sh: Remove trailing period in echo
- generate_source_tarball.sh: Use long-style argument to grep
- generate_source_tarball.sh: Add license
- generate_source_tarball.sh: Add indentation instructions for Emacs
- Remove -T0 argument from systemtap tar invocation
- Related: RHEL-30926 [eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
- generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
- generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
- generate_source_tarball.sh: Adapt version logic to work with 8u
- generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
- generate_source_tarball.sh: Update examples in header for clarity
- generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
- generate_source_tarball.sh: Only add --depth=1 on non-local repositories
- Move maintenance scripts to a scripts subdirectory
- icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
- jconsole.desktop.in: Restored by running icedtea_sync.sh
- policytool.desktop.in: Likewise.
- Restore IcedTea sources correctly in spec file
- discover_trees.sh: Set compile-command and indentation instruction s for Emacs
- discover_trees.sh: shellcheck: Do not use -o (SC2166)
- discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: Add authorship
- icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
- icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
- icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: Set compile-command and indentation instructions for Emacs
- openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
- openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
- generate_source_tarball.sh: Handle an existing checkout
- generate_source_tarball.sh: Sync indentation with java-21-openjdk version
- generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
- Related: RHEL-30926
8 2JgHAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f@- Update to shenandoah-jdk8u412-b08 (GA)
- Update release notes for shenandoah-8u412-b08.
- Complete release note for Certainly roots
- Switch to GA mode.
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Related: RHEL-30926DI HAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf- Update to shenandoah-jdk8u412-b07 (EA)
- Update release notes for shenandoah-8u412-b07.
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- Resolves: RHEL-309267H eHAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Turn off xz multi-threading on i686 as it fails with an out of memory error
- Normalise whitespace
- Move to upstr Z
9 9 L3IAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%KMIAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 ^O?IAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965xN gIAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914EM
IAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
K , K TQ
IThomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Invoke xz in multi-threaded mode
- generate_source_tarball.sh: Add WITH_TEMP environment variable
- generate_source_tarball.sh: Multithread xz on all available cores
- generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
- generate_source_tarball.sh: Update comment about tarball naming
- generate_source_tarball.sh: Reformat comment header
- generate_source_tarball.sh: Reformat and update help output
- generate_source_tarball.sh: Do a shallow clone, for speed
- generate_source_tarball.sh: Eliminate some removal prompting
- generate_source_tarball.sh: Make tarball reproducible
- generate_source_tarball.sh: Prefix temporary direc `OP IAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae!@- Update to shenandoah-jdk8u412-b01 (EA)
- Update release notes for shenandoah-8u412-b01.
- Switch to EA mode.
- Related: RHEL-30926 tory with temp-
- generate_source_tarball.sh: Remove temporary directory exit conditions
- generate_source_tarball.sh: Set compile-command in Emacs
- generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
- generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
- generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
- generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
- Use backward-compatible patch syntax
- generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
- generate_source_tarball.sh: Remove trailing period in echo
- generate_source_tarball.sh: Use long-style argument to grep
- generate_source_tarball.sh: Add license
- generate_source_tarball.sh: Add indentation instructions for Emacs
- Remove -T0 argument from systemtap tar invocation
- Related: RHEL-30926 beam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
- generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
- generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
- generate_source_tarball.sh: Adapt version logic to work with 8u
- generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
- generate_source_tarball.sh: Update examples in header for clarity
- generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
- generate_source_tarball.sh: Only add --depth=1 on non-local repositories
- Move maintenance scripts to a scripts subdirectory
- icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
- jconsole.desktop.in: Restored by running icedtea_sync.sh
- policytool.desktop.in: Likewise.
- Restore IcedTea sources correctly in spec file
- discover_trees.sh: Set compile-command and indentation instruction s for Emacs
- discover_trees.sh: shellcheck: Do not use -o (SC2166)
- discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: Add authorship
- icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
- icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
- icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: Set compile-command and indentation instructions for Emacs
- openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
- openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
- generate_source_tarball.sh: Handle an existing checkout
- generate_source_tarball.sh: Sync indentation with java-21-openjdk version
- generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
- Related: RHEL-30926
8 2TgIAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f@- Update to shenandoah-jdk8u412-b08 (GA)
- Update release notes for shenandoah-8u412-b08.
- Complete release note for Certainly roots
- Switch to GA mode.
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Related: RHEL-30926DS IAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf- Update to shenandoah-jdk8u412-b07 (EA)
- Update release notes for shenandoah-8u412-b07.
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- Resolves: RHEL-309267R eIAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Turn off xz multi-threading on i686 as it fails with an out of memory error
- Normalise whitespace
- Move to upstr a
&2 X JAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665oW UJAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665LV JAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665U JAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665
f -\ QJAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'[{UJJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665Z !JAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665Y !JAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665
:^wJAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{]yJAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
&2 b KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665oa UKAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L` KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665_ KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665
f -f QKAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'e{UKJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665d !KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665c !KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665
:hwKAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{gyKAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
r /; r m !LAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665l !LAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665k LAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665oj ULAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665Li LAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665
" T" -o QLAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'n{ULJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665
:qwLAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{pyLAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
W Kz W v !MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665u MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665ot UMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665Ls MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#18766650rcLAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_:- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062
e r+V: e DY
e1931c2c08f74962ec1d742c785c518f1942b86d552b9e27d9cb776d4c555f8aDX
758d2c3a908dc2f48b1ab2c25ec323231a54e2b646281ebbd88192b61617775eDW
518082fd34ea1c14e44917a04af17aa6e3307369f369dbe369f0fdf4e5b8e1eaDV
5013f655f5321c66d30f6ab553d640e8a1df541105200e36eeae415ca903a7acDU
f97dd6a530e0dc37dde8d1e71e04e877196e4f36ac6754904cd6a5e8e0e4990fDT
9512843f182c5c1950953d11669afc9c97394a90e3b4ebda1834fab7b5a97d88DS
5001584535af6ba52a00d1913b2b5f60df1239116a2cbcff84db48a9359bd3a3DR
c6fc833a542f540c1edc0431e34f06b0cd121fc635294ae62ae5d48fab254ddfDQ
242b3c3eb9d45d48b5e607845d5fbc380afca79449f49cf9cd801ea4a95ef419DP
124b95517eeee9deb9fa4cef2707b16c5530d6c6f263462b2c3deb2f8811b3d8DO
917745f55091ed42757a3d445e0f98ebd8e84ff75ab716acbdd8f6e1c584a8fdDN
2e1ba328190cee6e94f98145224aec06902152d1cc3188f06c1ac84dc0887d0bDM
7a5f1f1bd0da49fe22b1022a7bf998826161eacca343e82125f1b036b9cdbdac
f -y QMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'x{UMJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665w !MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665
:{wMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{zyMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
: K : : kNAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903E~ NAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690}{
NJiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#19016900|cMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_:- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062
Aa : kNAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903Z +NAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_=- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903[ -NAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_@- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903: kNAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903
` ` 7NAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963kYNAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963 NAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903
0 x 0 :
kOAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903: kOAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903E OAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690{
OJiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690
q A q OAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903:
kOAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903Z +OAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_=- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903[ -OAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_@- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903
q : kPAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081: kPAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#19380817OAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963kYOAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963
B + B d ?PAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#19380811 YPAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081 +PAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081
4 A 4 7PAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201kYPAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n@- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201: kPAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081: kPAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081: kPAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081
c Ac +QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081: kQAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081: kQAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081
Ja : kQAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081d ?QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#19380811 YQAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081
g A g %RAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`@- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024$7QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201k#YQAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n@- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201:" kQAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081:! kQAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081
,m r) [RAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea` @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809:( kRAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809:' kRAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809O& RAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`@- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809
AR :- kRAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809:, kRAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`E- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809j+ KRAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809:* kRAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`\- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809
] :1 kSAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809O0 SAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`@- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809/SAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`@- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024.'RAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`t- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
AJ j5 KSAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809:4 kSAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`\- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809r3 [SAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea` @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809:2 kSAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809
Ak 91TAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H- Remove non-Free test and demo files from source tarball.
- Related: rhbz#19997358'SAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`t- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395:7 kSAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809:6 kSAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`E- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809
6x "> ;TAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#19997359= iTAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359< iTAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359; iTAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735: TAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735
Z BPq Z B'TAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826ZA +TAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m@ QTAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359? iTAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
dX 9G iUAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359F iUAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359E iUAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735D UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735C1UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735
Y ZK +UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929mJ QUAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359I iUAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735"H ;UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735
+m 9O iVAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359N iVAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359M iVAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735L'UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
Y ZS +VAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929mR QVAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359Q iVAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735"P ;VAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735
0 0 _VAVAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366PU VAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809T'VAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
a B a 9[ iWAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735"Z ;WAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#19997359Y iWAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359X iWAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359W iWAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735
/ ^'WAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z] +WAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m\ QWAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735
G "a ;XAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735_`AWAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P_ WAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
Z BPq Z e'XAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Zd +XAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929mc QXAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359b iXAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
q G q Qh XAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_gAXAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366Pf XAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
>/ 9l iYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735"k ;YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735
jXAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=i qXAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
/ o'YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Zn +YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929mm QYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735
q G q Qr YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_qAYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366Pp YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
>/q mv QZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359u iZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
tYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=s qYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
e r+V: e Df
dc1cfb04b799c30dca02faae2f75f5cc94d83b63b11cf8e7acb33ed1b252117fDe
2b1a27963b4d2d2d4589a7d96e361c8f4359cb51ad10f5e108215c381d491ba3Dd
cb3ea59253d078a2c7a60ff6f6c3f55bf94679248c132be8e27c534245acd6c8Dc
1ab3f90a7eed6a0e8f44c9833e1def98bdbceb194f37062e21cfb6fb030563e2Db
3b5a17995e4660d4c305944c4a13cd1bd8bdda18b9d69d13031b2b1044e1cd77Da
aa3730bd40f0c5b60ded75b15d9a0b7f845a26219a0a739f877d6d2ac7161c6fD`
0c8fb84a63da81ffc9727d465f04ac197820bce6473ad8ca5f2d241c6cdfb9a7D_
7de0016fd49560394d1c4f5584dd396e5b41989957702068ef31979934c299ddD^
f13d571f41792afa9d08465580b23f08ff7dd564e51f40e42a9b9f3a0ff77b62D]
1f0f6113c67eb17059e2588bc76ce4d1ce793113d638c89faf42684d92ac2c3eD\
6d23e0e03a7a536fe3cae17f34dc45960c361e2ee84b11158681f3db86dbb0b3D[
f0c9b7b923d47df8b92aa0c427d4754da9c2d22e9eb87e436c06305406998a3cDZ
96d0ea79b3da11f9b3d85598dae3187e501c54728cd8509492569f9dc2c1670f
!
Py ZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809x'ZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Zw +ZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929
=| qZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q{ ZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_zAZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366
a a ~ZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
}ZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422
Z BPq Z '[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z +[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m Q[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359 i[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
q G q Q [Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_A[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P [Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422= q[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
~ p ~ m Q\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735 [Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
!
P \Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809 '\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z
+\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929
= q\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q \Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_
A\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366
a a \Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422
g O]~ g ']Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z +]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m Q]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735,[\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383
q G q Q ]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_A]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P ]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422= q]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p , []Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 ]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
0 0 _ A^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P ^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809 '^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
Y *hY
"^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=! q^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q ^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529 bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ v w x y z {% |) }- ~1 5 9 > B G K O S V [ ^ a e h l o r v y | ~ " $ ' * , . 1 4 6 9 ; > @ C E G I L M O Q S V W X Z ] ^ ` b d g h Áj ām Łn Ɓo ǁq ȁt Ɂv ˁx ́y ́{ ~ ρ Ё с ҁ Ӂ
ԁ Ձ ց ׁ ف ځ
p ,$[^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 #^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
7 ''_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826M& ^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r%g^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
q G q Q* _Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_)A_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P( _Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
,_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=+ q_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,.[_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 -_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
7 _1A`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366M0 _Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r/g_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
Y *hY
4`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=3 q`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q2 `Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,6[`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 5`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f9 C`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M8 `Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r7g`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
) ) _;AaAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366n:_`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
Y *hY
>aAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422== qaAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q< aAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,@[aAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 ?aAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L fC CaAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191MB aAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rAgaAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
QE bAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529nD_aAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
/ >/
GbAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=F qbAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,I[bAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 HbAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L fL CbAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191MK bAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rJgbAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
nM_bAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
d QO cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529N1bAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
/ >/
QcAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=P qcAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,S[cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 RcAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L fV CcAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191MU cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rTgcAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
nW_cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
d d X1cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
p ,Z[dAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 YdAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f] CdAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M\ dAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r[gdAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n^_dAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ ` }dAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106_1dAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
F ?F tbkdAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<a odAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
p ,d[eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 ceAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L fg CeAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191Mf eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695regeAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
nh_eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ j }eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106i1eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
t ?Ft Mm fAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695tlkeAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<k oeAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
fn CfAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191
no_fAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ q }fAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106p1fAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) tqAfJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319tskfAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<r ofAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 v3fAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%uMfAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
e r+V: e Ds
8fab540ec8ac058e28cb3e62a08c210f00ce22695ad5a2b0412d48e0f77c285aDr
2ff94d80fcae8e5f2ae6416eb0e955f4149e7639722b5426b2b8f12150cc14bbDq
313a86e45fc4b42084c618c11f233c1ab6950f5af7ce19f962ea3fd1020736ebDp
da4cd5b16857b9f434f773471d103d61dba9fbe99a3264cfce051444c342cf1bDo
009c4fd4d1a151a215ef1a31eb4f5b076e16ad5bd1c6bed249571dfdde69a686Dn
bd09647e7e930afde068aa13eae3a3f7166bcf0d4918c52f525b47c511c7b692Dm
030b52a92f3fd60b2df1b1fee6a964377bc4d80776dbdfcfae051132e0c3815cDl
811548ea9fa1b1fd4ba32a27977ce75a08bd90e1f90d50bbdfaabe36480c3f46Dk
b7c575cffd422a15f77eaeb8f4a41cc6e965c486511f363df2d62887b7934eb0Dj
66c5f4e48d6872789f81a04ef48fceb67a1705aadd369b0ccff804cb0eefeda9Di
a18aeb73905ede9c9bd2f5ab9736372813b7662678482ea5ad4990ce21b77ae9Dh
985cd3c30e1357c60af6a5b4425c5d16eca3e6970da5871aca65ecca4c468cd1Dg
1a73f880c24703aeacd0795c62a4ddd8fe4db2ca199a961180176c9713e3fdf2
C .C fx CgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191Mw gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695
ny_gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ { }gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106z1gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) ~qAgJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319t}kgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<| ogAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 3gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%MgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
\ d \ }hAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#22211061hAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) qAhJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319tkhAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106< ohAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 3hAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%MhAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 d
?hAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965x ghAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914E
hAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
\ d \ }iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106 1iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) qAiJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319tkiAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<
oiAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 3iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%MiAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 d ?iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965x giAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914E
iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
9 9 3jAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%MjAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 ^?jAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965x gjAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914E
jAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
K , K T
jThomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Invoke xz in multi-threaded mode
- generate_source_tarball.sh: Add WITH_TEMP environment variable
- generate_source_tarball.sh: Multithread xz on all available cores
- generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
- generate_source_tarball.sh: Update comment about tarball naming
- generate_source_tarball.sh: Reformat comment header
- generate_source_tarball.sh: Reformat and update help output
- generate_source_tarball.sh: Do a shallow clone, for speed
- generate_source_tarball.sh: Eliminate some removal prompting
- generate_source_tarball.sh: Make tarball reproducible
- generate_source_tarball.sh: Prefix temporary direc ہO jAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae!@- Update to shenandoah-jdk8u412-b01 (EA)
- Update release notes for shenandoah-8u412-b01.
- Switch to EA mode.
- Related: RHEL-30926 tory with temp-
- generate_source_tarball.sh: Remove temporary directory exit conditions
- generate_source_tarball.sh: Set compile-command in Emacs
- generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
- generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
- generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
- generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
- Use backward-compatible patch syntax
- generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
- generate_source_tarball.sh: Remove trailing period in echo
- generate_source_tarball.sh: Use long-style argument to grep
- generate_source_tarball.sh: Add license
- generate_source_tarball.sh: Add indentation instructions for Emacs
- Remove -T0 argument from systemtap tar invocation
- Related: RHEL-30926 eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
- generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
- generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
- generate_source_tarball.sh: Adapt version logic to work with 8u
- generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
- generate_source_tarball.sh: Update examples in header for clarity
- generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
- generate_source_tarball.sh: Only add --depth=1 on non-local repositories
- Move maintenance scripts to a scripts subdirectory
- icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
- jconsole.desktop.in: Restored by running icedtea_sync.sh
- policytool.desktop.in: Likewise.
- Restore IcedTea sources correctly in spec file
- discover_trees.sh: Set compile-command and indentation instruction s for Emacs
- discover_trees.sh: shellcheck: Do not use -o (SC2166)
- discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: Add authorship
- icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
- icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
- icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: Set compile-command and indentation instructions for Emacs
- openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
- openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
- generate_source_tarball.sh: Handle an existing checkout
- generate_source_tarball.sh: Sync indentation with java-21-openjdk version
- generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
- Related: RHEL-30926
8 2 gjAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f@- Update to shenandoah-jdk8u412-b08 (GA)
- Update release notes for shenandoah-8u412-b08.
- Complete release note for Certainly roots
- Switch to GA mode.
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Related: RHEL-30926D jAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf- Update to shenandoah-jdk8u412-b07 (EA)
- Update release notes for shenandoah-8u412-b07.
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- Resolves: RHEL-309267 ejAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Turn off xz multi-threading on i686 as it fails with an out of memory error
- Normalise whitespace
- Move to upstr
9 9 3kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577% MkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 ^#?kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965x" gkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914E!
kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
K , K T%
kThomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Invoke xz in multi-threaded mode
- generate_source_tarball.sh: Add WITH_TEMP environment variable
- generate_source_tarball.sh: Multithread xz on all available cores
- generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
- generate_source_tarball.sh: Update comment about tarball naming
- generate_source_tarball.sh: Reformat comment header
- generate_source_tarball.sh: Reformat and update help output
- generate_source_tarball.sh: Do a shallow clone, for speed
- generate_source_tarball.sh: Eliminate some removal prompting
- generate_source_tarball.sh: Make tarball reproducible
- generate_source_tarball.sh: Prefix temporary direc O$ kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae!@- Update to shenandoah-jdk8u412-b01 (EA)
- Update release notes for shenandoah-8u412-b01.
- Switch to EA mode.
- Related: RHEL-30926 tory with temp-
- generate_source_tarball.sh: Remove temporary directory exit conditions
- generate_source_tarball.sh: Set compile-command in Emacs
- generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
- generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
- generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
- generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
- Use backward-compatible patch syntax
- generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
- generate_source_tarball.sh: Remove trailing period in echo
- generate_source_tarball.sh: Use long-style argument to grep
- generate_source_tarball.sh: Add license
- generate_source_tarball.sh: Add indentation instructions for Emacs
- Remove -T0 argument from systemtap tar invocation
- Related: RHEL-30926 eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
- generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
- generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
- generate_source_tarball.sh: Adapt version logic to work with 8u
- generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
- generate_source_tarball.sh: Update examples in header for clarity
- generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
- generate_source_tarball.sh: Only add --depth=1 on non-local repositories
- Move maintenance scripts to a scripts subdirectory
- icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
- jconsole.desktop.in: Restored by running icedtea_sync.sh
- policytool.desktop.in: Likewise.
- Restore IcedTea sources correctly in spec file
- discover_trees.sh: Set compile-command and indentation instruction s for Emacs
- discover_trees.sh: shellcheck: Do not use -o (SC2166)
- discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: Add authorship
- icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
- icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
- icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: Set compile-command and indentation instructions for Emacs
- openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
- openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
- generate_source_tarball.sh: Handle an existing checkout
- generate_source_tarball.sh: Sync indentation with java-21-openjdk version
- generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
- Related: RHEL-30926
8 2(gkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f@- Update to shenandoah-jdk8u412-b08 (GA)
- Update release notes for shenandoah-8u412-b08.
- Complete release note for Certainly roots
- Switch to GA mode.
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Related: RHEL-30926D' kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf- Update to shenandoah-jdk8u412-b07 (EA)
- Update release notes for shenandoah-8u412-b07.
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- Resolves: RHEL-309267& ekAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Turn off xz multi-threading on i686 as it fails with an out of memory error
- Normalise whitespace
- Move to upstr
&2 , lAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665o+ UlAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L* lAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665) lAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665
f -0 QlAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'/{UlJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665. !lAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665- !lAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665
:2wlAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{1ylAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
&2 6 mAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665o5 UmAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L4 mAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#18766653 mAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665
f -: QmAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'9{UmJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#18766658 !mAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#18766657 !mAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665
:<wmAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{;ymAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
r /; r A !nAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665@ !nAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665? nAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665o> UnAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L= nAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665
" T" -C QnAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'B{UnJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665
:EwnAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{DynAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
W Kz W J !oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665I oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665oH UoAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665LG oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#18766650FcnAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_:- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062
f -M QoAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'L{UoJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665K !oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665
:OwoAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{NyoAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
: K : :S kpAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903ER pAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690Q{
pJiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#19016900PcoAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_:- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062
Aa :W kpAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903ZV +pAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_=- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903[U -pAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_@- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903:T kpAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903
` ` Z7pAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963kYYpAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963 X pAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903
0 x 0 :^ kqAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903:] kqAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903E\ qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690[{
qJiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690
q A q b qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903:a kqAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903Z` +qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_=- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903[_ -qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_@- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903
q :f krAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081:e krAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081d7qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963kcYqAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963
B + B di ?rAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#19380811h YrAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081g +rAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081
4 A 4 n7rAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201kmYrAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n@- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201:l krAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081:k krAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081:j krAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081
c Ac q +sAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081:p ksAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081:o ksAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081
Ja :t ksAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081ds ?sAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#19380811r YsAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081
g A g ytAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`@- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024x7sAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201kwYsAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n@- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201:v ksAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081:u ksAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081
e r+V: e D
496ca22ef6b436dbee6813613f31f2ebe1718fbe7c53d90796a6f3f18ee0a331D
3fc86cf389acff5dfff9dfd65e25b9d96d358214bd2bd236061ed31d647ad9bbD~
fd17cae7a3075f2ad58ed62ad9a2bb016b9d0ecbda3ed31b464e395e00f4dcb9D}
5435c138b53b3d77c61b682fd1142b6ebad9946a7aafbb1f722f6f9a4896a265D|
e1e1b8adc5317dafcd61f9374708c3ef7388ecd2591a47bb2dfdedc0eee9d389D{
8b93611a7e50ab8b817c59d6ef504cf63f14b1ba210b4da69add3f3176898478Dz
f22ced6e5193aa0b22495fa95e9de588c04f9afa2d6070faf801306fc7e68363Dy
c2800a0089be75b093cde6c6c8289a71707f6b56b3e1e3655e237dd5229856efDx
7fa5ad9d67b6a38b005e9e2a1e8217c78399fa4a6135965a3d32ed6d2ab0889cDw
1282baff4a36da2985cd30f9ea8f45ff5c8aa9ed747e858cf20363a7b30022abDv
769a4e98dcdf66de7159dd3adbff251c61fcb448ebdacbcc474122895e9cf709Du
2ced5602fa70385602b80de9a0a4dd9347186ade416907e8bb7fd066af18f6e3Dt
00dfecc575f562ca6c58f3290ca7fda9b19bbacf629d7c687dc4242984f8bb37
,m r} [tAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea` @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809:| ktAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809:{ ktAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809Oz tAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`@- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809
AR : ktAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809: ktAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`E- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809j KtAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809:~ ktAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`\- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809
] : kuAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809O uAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`@- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809uAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`@- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024'tAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`t- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
AJ j KuAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809: kuAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`\- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809r [uAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea` @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809: kuAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809
Ak
1vAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735 'uAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`t- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395: kuAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809:
kuAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`E- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809
6x " ;vAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#19997359 ivAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359 ivAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359 ivAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735 vAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735
Z BPq Z 'vAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z +vAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m QvAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359 ivAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
dX 9 iwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359 iwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359 iwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735 wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#19997351wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735
Y Z +wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m QwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359 iwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735" ;wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735
+m 9# ixAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359" ixAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359! ixAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735 'wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
Y Z' +xAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m& QxAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359% ixAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735"$ ;xAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735
0 0 _*AxAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P) xAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809('xAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
a B a 9/ iyAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735". ;yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#19997359- iyAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359, iyAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359+ iyAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735
/ 2'yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z1 +yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m0 QyAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735
G "5 ;zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735_4AyAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P3 yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
Z BPq Z 9'zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z8 +zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m7 QzAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#199973596 izAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735 bR GRY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ ߁ # ၑ% 偑( 恑, 灑0 聑2 遑6 ꁑ: 끑< 쁑A 큑C E J M O S W Z ^ b f i n q t y }
# ' *
/ 2 5
9 < @ C F J M P R V Y [ ] ` c e i l n !p "s #v $x %{ '~ ( ) * + ,
-
. / 0 1 2 3 4 5 6! 7# 8% 9' :* ;+ <, =. >1 ?2 @4 A6 B8 C; D< E> FA
q G q Q< zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_;AzAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P: zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
>/ 9@ i{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735"? ;{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735
>zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422== qzAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
/ C'{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826ZB +{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929mA Q{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735
q G q QF {Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_EA{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366PD {Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
>/q mJ Q|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359I i|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
H{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=G q{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
!
PM |Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809L'|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826ZK +|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929
=P q|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529QO |Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_NA|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366
a a R|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
Q|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422
Z BPq Z V'}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826ZU +}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929mT Q}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359S i}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
q G q QY }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_XA}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366PW }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
[}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=Z q}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
~ p ~ m] Q~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735 \}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
!
P` ~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809_'~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z^ +~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929
=c q~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Qb ~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_aA~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366
a a e~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
d~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422
g O]~ g i'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Zh +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929mg QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735,f[~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383
q G q Ql Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_kAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366Pj Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
nAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=m qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,p[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
0 0 _sAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366Pr Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809q'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
Y *hY
vAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=u qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Qt Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,x[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
7 {'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Mz Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rygAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
e r+V: e D
832470ee4b64e39723111ada3304a733f57c404fb89c7383123a52f33bbde6d6D
bd49c65cde81a93d80eed77c33ebfb093577ce199e9c182c9d77e73774072f37D
7b1c52bbe226abacf3c7479ca52c3d631af47e215754ccfb2ad53c6226e13392D
42867004de7a228cf85955e79762cca11cfedcace4742b7caa46109e8131839aD
76640b341c1b50d068385f178412bff6541f41c567500e0f8e16463cdeb30c40D
6e70e53e5187df893930a8cf3cec44c126d94196925b1a43fa27f481acdeb5bbD
e14e58cd6c0a61d873c99c10de7e5a36ec844b84147e4656a784e33c1b0715b4D
81b502f5e282e58db43c00894f89f50523953165c64a408ef983aa2829145c7aD
30f27f7cbabd3d9bee929e1fa43a3ac2a916c5a427598ee5e816dd100518994dD
ee0b6ee143ba37c13abc5858fef0725d5b30992afdcaff90babcd5af1ac812c8D
67c66396a0ecb57afd6c3a2f070e239f41c72943e3c3994c64e68c02a4cc1829D
4b31ab8ebd6b1481a2299adfff2b7d616abc0233760f8745ec256b96b86d0077D
7479424a5b57460d14eb031904fe5f6c5eacebff7fa6b708fb1b98b33a6b3900
q G q Q~ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_}AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P| Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422= qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
7 _AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366M Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
Y *hY
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422= qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,
[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f
CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
) ) _AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366n_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
Y *hY
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422= qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529n_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
/ >/
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422= qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p , [Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n!_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
d Q# Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529"1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
/ >/
%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=$ qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,'[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 &Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f* CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M) Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r(gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n+_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
d d ,1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
p ,.[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 -Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f1 CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M0 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r/gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n2_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ 4 }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#222110631Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
F ?F t6kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<5 oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
p ,8[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f; CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r9gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n<_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ > }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106=1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
t ?Ft MA Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695t@kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<? oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
fB CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191
nC_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ E }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106D1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) HqAJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319tGkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<F oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 J3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%IMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
C .C fL CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191MK Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695
nM_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ O }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106N1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) RqAJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319tQkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<P oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 T3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%SMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
\ d \ V }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106U1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) YqAJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319tXkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<W oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 [3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%ZMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 d^ ?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965x] gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914E\
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
\ d \ ` }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106_1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) cqAJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319tbkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<a oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 e3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%dMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 dh ?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965xg gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914Ef
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
9 9 j3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%iMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 ^m?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965xl gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914Ek
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
K , K To
Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Invoke xz in multi-threaded mode
- generate_source_tarball.sh: Add WITH_TEMP environment variable
- generate_source_tarball.sh: Multithread xz on all available cores
- generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
- generate_source_tarball.sh: Update comment about tarball naming
- generate_source_tarball.sh: Reformat comment header
- generate_source_tarball.sh: Reformat and update help output
- generate_source_tarball.sh: Do a shallow clone, for speed
- generate_source_tarball.sh: Eliminate some removal prompting
- generate_source_tarball.sh: Make tarball reproducible
- generate_source_tarball.sh: Prefix temporary direc \On Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae!@- Update to shenandoah-jdk8u412-b01 (EA)
- Update release notes for shenandoah-8u412-b01.
- Switch to EA mode.
- Related: RHEL-30926 tory with temp-
- generate_source_tarball.sh: Remove temporary directory exit conditions
- generate_source_tarball.sh: Set compile-command in Emacs
- generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
- generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
- generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
- generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
- Use backward-compatible patch syntax
- generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
- generate_source_tarball.sh: Remove trailing period in echo
- generate_source_tarball.sh: Use long-style argument to grep
- generate_source_tarball.sh: Add license
- generate_source_tarball.sh: Add indentation instructions for Emacs
- Remove -T0 argument from systemtap tar invocation
- Related: RHEL-30926 ^eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
- generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
- generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
- generate_source_tarball.sh: Adapt version logic to work with 8u
- generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
- generate_source_tarball.sh: Update examples in header for clarity
- generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
- generate_source_tarball.sh: Only add --depth=1 on non-local repositories
- Move maintenance scripts to a scripts subdirectory
- icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
- jconsole.desktop.in: Restored by running icedtea_sync.sh
- policytool.desktop.in: Likewise.
- Restore IcedTea sources correctly in spec file
- discover_trees.sh: Set compile-command and indentation instruction s for Emacs
- discover_trees.sh: shellcheck: Do not use -o (SC2166)
- discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: Add authorship
- icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
- icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
- icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: Set compile-command and indentation instructions for Emacs
- openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
- openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
- generate_source_tarball.sh: Handle an existing checkout
- generate_source_tarball.sh: Sync indentation with java-21-openjdk version
- generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
- Related: RHEL-30926
8 2rgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f@- Update to shenandoah-jdk8u412-b08 (GA)
- Update release notes for shenandoah-8u412-b08.
- Complete release note for Certainly roots
- Switch to GA mode.
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Related: RHEL-30926Dq Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf- Update to shenandoah-jdk8u412-b07 (EA)
- Update release notes for shenandoah-8u412-b07.
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- Resolves: RHEL-309267p eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Turn off xz multi-threading on i686 as it fails with an out of memory error
- Normalise whitespace
- Move to upstr ]
9 9 t3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%sMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 ^w?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965xv gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914Eu
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
K , K Ty
Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Invoke xz in multi-threaded mode
- generate_source_tarball.sh: Add WITH_TEMP environment variable
- generate_source_tarball.sh: Multithread xz on all available cores
- generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
- generate_source_tarball.sh: Update comment about tarball naming
- generate_source_tarball.sh: Reformat comment header
- generate_source_tarball.sh: Reformat and update help output
- generate_source_tarball.sh: Do a shallow clone, for speed
- generate_source_tarball.sh: Eliminate some removal prompting
- generate_source_tarball.sh: Make tarball reproducible
- generate_source_tarball.sh: Prefix temporary direc cOx Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae!@- Update to shenandoah-jdk8u412-b01 (EA)
- Update release notes for shenandoah-8u412-b01.
- Switch to EA mode.
- Related: RHEL-30926 tory with temp-
- generate_source_tarball.sh: Remove temporary directory exit conditions
- generate_source_tarball.sh: Set compile-command in Emacs
- generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
- generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
- generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
- generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
- Use backward-compatible patch syntax
- generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
- generate_source_tarball.sh: Remove trailing period in echo
- generate_source_tarball.sh: Use long-style argument to grep
- generate_source_tarball.sh: Add license
- generate_source_tarball.sh: Add indentation instructions for Emacs
- Remove -T0 argument from systemtap tar invocation
- Related: RHEL-30926 eeam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
- generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
- generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
- generate_source_tarball.sh: Adapt version logic to work with 8u
- generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
- generate_source_tarball.sh: Update examples in header for clarity
- generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
- generate_source_tarball.sh: Only add --depth=1 on non-local repositories
- Move maintenance scripts to a scripts subdirectory
- icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
- jconsole.desktop.in: Restored by running icedtea_sync.sh
- policytool.desktop.in: Likewise.
- Restore IcedTea sources correctly in spec file
- discover_trees.sh: Set compile-command and indentation instruction s for Emacs
- discover_trees.sh: shellcheck: Do not use -o (SC2166)
- discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: Add authorship
- icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
- icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
- icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: Set compile-command and indentation instructions for Emacs
- openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
- openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
- generate_source_tarball.sh: Handle an existing checkout
- generate_source_tarball.sh: Sync indentation with java-21-openjdk version
- generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
- Related: RHEL-30926
8 2|gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f@- Update to shenandoah-jdk8u412-b08 (GA)
- Update release notes for shenandoah-8u412-b08.
- Complete release note for Certainly roots
- Switch to GA mode.
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Related: RHEL-30926D{ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf- Update to shenandoah-jdk8u412-b07 (EA)
- Update release notes for shenandoah-8u412-b07.
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- Resolves: RHEL-309267z eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Turn off xz multi-threading on i686 as it fails with an out of memory error
- Normalise whitespace
- Move to upstr d
e r+V: e D
a706d40bf0fcf24324c24d5742ca54450b84792752d49ed7af95192bcd3e4527D
2f7c6c553d364083a3603f33a066c8031c3bc2f1e9c8bb2d64b355daf9a42c2bD
71e8109b89c2bfa0c40687b649c02bd70e7702214ec1fb76fe606db76ace6affD
0a35810bd924f95ae2af1ba31051f64c8683e42b953329a6af07ea00495f96a2D
c7627b2a018e4b1db2b6131608528eae404bf3c43ab252995b1d5f7196ab97e1D
614205bf0041e0a5d32d64bd0743218a5ed52c6dcd8e5880076d87abff2016b2D
bc495afc92d333d543576431a1cfc03dccc3bda5282057211d2065d0032129f1D
f3ebae8493971694208c96d6d6286e660e797bed742700585d403ce9fd145072D
39bc056b01daeb577a1d13e5d56959179803eea2c53c39eeff982663bc189df1D
7afb4c27414189dd2a2cc1df1ce6c80ad77c0eb59aca381a22a3f4033f950c67D
1497a77c838103e684f02aef90dea21228feaeec08fb162ab52cb8db75cd682fD
97077fe95c5fd7927b97fea9e945e2065d9ef3dd5ca4eb757666fdc5b42ad749D
56b0e8da36b334813521cd572d937eb75a589047d4c9a956b630d239792bf4e6
&2 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665o UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L~ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665} Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665
f - QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'{UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665 !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665 !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665
:wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
&2
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665o UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665
f - QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'
{UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665 !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665 !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665
:wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
r /; r !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665 !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665o UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665
" T" - QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'{UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665
:wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
W Kz W !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665o UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#18766650cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_:- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062
f -! QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665' {UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665 !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665
:#wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{"yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
: K : :' kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903E& Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690%{
Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#19016900$cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_:- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062
Aa :+ kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903Z* +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_=- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903[) -Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_@- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903:( kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903
` ` .7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963k-YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963 , Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903
0 x 0 :2 kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903:1 kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903E0 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690/{
Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690
q A q 6 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903:5 kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903Z4 +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_=- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903[3 -Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_@- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903
q :: kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081:9 kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#193808187Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963k7YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963 bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ HC IE JH KJ LL MM NO OR PT QV RY S[ T^ U` Vc We Xh Yj Zm [o _r `t aw by f| h i j k
l m n o p q r! s# t' u+ v. w2 x6 y: {= |B }E ~H M Q U Y ] a f j o s w { ~
! $ & * - / 1 4 7 9 = @ B D G J L O R T V Y \ ^ a c f h k
B + B d= ?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#19380811< YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081; +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081
4 A 4 B7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201kAYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n@- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201:@ kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081:? kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081:> kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081
c Ac E +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081:D kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081:C kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081
Ja :H kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081dG ?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#19380811F YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081
g A g MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`@- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024L7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201kKYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n@- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201:J kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081:I kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081
,m rQ [Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea` @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809:P kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809:O kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809ON Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`@- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809
AR :U kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809:T kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`E- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809jS KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809:R kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`\- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809
] :Y kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809OX Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`@- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809WAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`@- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024V'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`t- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
AJ j] KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809:\ kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`\- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809r[ [Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea` @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809:Z kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809
Ak a1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735`'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`t- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395:_ kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809:^ kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`E- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809
6x "f ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#19997359e iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359d iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359c iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735b Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735
Z BPq Z j'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Zi +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929mh QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359g iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
dX 9o iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359n iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359m iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735l Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735k1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735
Y Zs +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929mr QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359q iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735"p ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735
+m 9w iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359v iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359u iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735t'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
Y Z{ +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929mz QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359y iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735"x ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735
0 0 _~AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P} Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809|'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
e r+V: e D'
6182e47b9746410469ab21c90f69c924a80ceff0a394abd6a25a441e8d6cc49eD&
b554df264228a60d69e256e2f70f55d320abe544bb18085a944c35b983f83b21D%
214fc2bc53e4979642949a2ce8ea6bd43bff20e98fa27016ae4ad1be3c189b60D$
f154f7fbe4285c64fd5d8032253657798d0717ac258ce5a8ece9b6e798df388cD#
d2490b1f0f83f60017971858b0aa1f5aba0285093f3b53cdaa0e5a1dd65b282bD"
f82689a8168490ea030790e836a9ce025ac23d19836b5ef4eb2d441b7d99d8a0D!
11babb3c74159846537e70da4fb01e148e8741a334bdc4689a5eb16b24a1a181D
12efe5e7e0fc2ad175b1c36f053e1a4532e1f85d27fe3489623cb945a5908677D
5941cfa3708aa1d7eae457e8f0abc55a55d5a84eadb56473770f0a82215aa495D
c204a4ffd212c3a27c0afea8e7c43b386fac6da8dfb78049b8fff2cea01ea128D
3d985b2d2ec13d506f3e32f82236c706a953bf9178605bd7e9c559e99fe33c06D
d17c2ab42cfa6667afaac7434e92be20fd0330b7a2cf8ad897daec993049f5e9D
a3cd127f94e232f4ccaddd486ee240986e25b65c51ab664b49ec511d5310482c
a B a 9 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735" ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735
/ 'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735
G " ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735_AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
Z BPq Z
'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359
iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
q G q Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
>/ 9 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735" ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422= qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
/ 'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735
q G q Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
>/q m QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422= qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
!
P! Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809 'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929
=$ qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q# Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_"AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366
a a &Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422
Z BPq Z *'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z) +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m( QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359' iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
q G q Q- Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_,AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P+ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=. qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
~ p ~ m1 QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735 0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
!
P4 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#20228093'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z2 +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929
=7 qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q6 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_5AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366
a a 9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422
g O]~ g ='Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z< +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m; QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735,:[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383
q G q Q@ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_?AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P> Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
BAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=A qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,D[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
0 0 _GAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366PF Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809E'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
Y *hY
JAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=I qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529QH Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,L[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
7 O'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826MN Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rMgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
q G q QR Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_QAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366PP Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
TAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=S qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,V[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
7 _YAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366MX Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rWgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
Y *hY
\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=[ qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529QZ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,^[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 ]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L fa CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M` Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r_gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
) ) _cAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366nb_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
Y *hY
fAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=e qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Qd Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,h[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L fk CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191Mj Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rigAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
Qm Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529nl_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
/ >/
oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=n qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,q[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 pAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L ft CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191Ms Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rrgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
nu_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
d Qw Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529v1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
/ >/
yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=x qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,{[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f~ CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M} Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r|gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
d d 1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
e r+V: e D4
60639db656637bac71a8495c83b9cc351c89b200e836ed3343dfa6bca29e3956D3
09c09056918a1d0fcf94103b7cc7f9728ea6f763a2c2d3db5a1a470846afc777D2
43d76c869fe744e94bf344aa66f638f4afcac144a43ed4d8336d4147ae3bb81eD1
29bd25debd6689e7eb9f2261280bdb1b0233f6d1bf8099f49d31d530c4432eb0D0
e55f9021fa118e217df9db527f05fb35638c68975d0977584ac974b8c6a6bddfD/
903dd1548295c69291a624080d2c82e710a22a8ff376f018d6fd3a0f4d907c85D.
5f5b887dfc9f6ab8986542411f965a160cefec2bd50e34635046cb950eb7d93dD-
60f47d3d5a4d59ab230916a44b7ecff881116a21de176de5276bd96e52ac5c3eD,
61ce4b03660d33874c07cc8931ddbfe63af33129c020331fef0850ec847167e3D+
13c47236e82fe68997766cf6d15ce0201350f4f534beee1f7e77dbee3e461cf0D*
f5e02cd3cf204b648c7dd511674fd8b54070efe7521303ff43080cfcb8b074a3D)
6dce766bf15259d4d1a7aba1acd135a56d9bb61b6d653cef2da6590e890d9fd9D(
ad1b644027e6c6f011f3ffcc714aa27825b548561a43f88debe325f3ed0dee5e
p ,[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#22211061Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
F ?F t
kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106< oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
p , [Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r
gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#22211061Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
t ?Ft M Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695tkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106< oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
f CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191
n_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#22211061Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) qAJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319tkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106< oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577% MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
C .C f CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695
n!_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ # }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106"1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) &qAJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319t%kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<$ oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 (3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%'MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
\ d \ * }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106)1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) -qAJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319t,kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<+ oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 /3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%.MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 d2 ?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965x1 gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914E0
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
\ d \ 4 }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#222110631Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) 7qAJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319t6kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<5 oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 93Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%8MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 d< ?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965x; gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914E:
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
9 9 >3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%=MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 ^A?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965x@ gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914E?
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
K , K TC
Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Invoke xz in multi-threaded mode
- generate_source_tarball.sh: Add WITH_TEMP environment variable
- generate_source_tarball.sh: Multithread xz on all available cores
- generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
- generate_source_tarball.sh: Update comment about tarball naming
- generate_source_tarball.sh: Reformat comment header
- generate_source_tarball.sh: Reformat and update help output
- generate_source_tarball.sh: Do a shallow clone, for speed
- generate_source_tarball.sh: Eliminate some removal prompting
- generate_source_tarball.sh: Make tarball reproducible
- generate_source_tarball.sh: Prefix temporary direc ށOB Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae!@- Update to shenandoah-jdk8u412-b01 (EA)
- Update release notes for shenandoah-8u412-b01.
- Switch to EA mode.
- Related: RHEL-30926 tory with temp-
- generate_source_tarball.sh: Remove temporary directory exit conditions
- generate_source_tarball.sh: Set compile-command in Emacs
- generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
- generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
- generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
- generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
- Use backward-compatible patch syntax
- generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
- generate_source_tarball.sh: Remove trailing period in echo
- generate_source_tarball.sh: Use long-style argument to grep
- generate_source_tarball.sh: Add license
- generate_source_tarball.sh: Add indentation instructions for Emacs
- Remove -T0 argument from systemtap tar invocation
- Related: RHEL-30926 eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
- generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
- generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
- generate_source_tarball.sh: Adapt version logic to work with 8u
- generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
- generate_source_tarball.sh: Update examples in header for clarity
- generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
- generate_source_tarball.sh: Only add --depth=1 on non-local repositories
- Move maintenance scripts to a scripts subdirectory
- icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
- jconsole.desktop.in: Restored by running icedtea_sync.sh
- policytool.desktop.in: Likewise.
- Restore IcedTea sources correctly in spec file
- discover_trees.sh: Set compile-command and indentation instruction s for Emacs
- discover_trees.sh: shellcheck: Do not use -o (SC2166)
- discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: Add authorship
- icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
- icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
- icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: Set compile-command and indentation instructions for Emacs
- openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
- openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
- generate_source_tarball.sh: Handle an existing checkout
- generate_source_tarball.sh: Sync indentation with java-21-openjdk version
- generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
- Related: RHEL-30926
8 2FgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f@- Update to shenandoah-jdk8u412-b08 (GA)
- Update release notes for shenandoah-8u412-b08.
- Complete release note for Certainly roots
- Switch to GA mode.
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Related: RHEL-30926DE Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf- Update to shenandoah-jdk8u412-b07 (EA)
- Update release notes for shenandoah-8u412-b07.
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- Resolves: RHEL-309267D eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Turn off xz multi-threading on i686 as it fails with an out of memory error
- Normalise whitespace
- Move to upstr
9 9 H3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%GMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577 bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ o q t u w y { ~ Á
ā Ł Ɓ ǁ ȁ Ɂ ʁ ˁ ́ ́ ρ! Ё# с& ҁ( Ӂ* ԁ- Ձ/ ց2 ׁ4 7 ف9 ځ< ہ> ܁A ݁C ၖF ⁖H 䁖K 偖M 遖P ꁖT 끖X 쁖Z 큖_ a c g k o r v { " % ( * - 0 2 4 7 :
< ? B
D G I K M P Q R T W X Z ] ^ _ a d f
69 ^K?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965xJ gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914EI
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
K , K TM
Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Invoke xz in multi-threaded mode
- generate_source_tarball.sh: Add WITH_TEMP environment variable
- generate_source_tarball.sh: Multithread xz on all available cores
- generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
- generate_source_tarball.sh: Update comment about tarball naming
- generate_source_tarball.sh: Reformat comment header
- generate_source_tarball.sh: Reformat and update help output
- generate_source_tarball.sh: Do a shallow clone, for speed
- generate_source_tarball.sh: Eliminate some removal prompting
- generate_source_tarball.sh: Make tarball reproducible
- generate_source_tarball.sh: Prefix temporary direc OL Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae!@- Update to shenandoah-jdk8u412-b01 (EA)
- Update release notes for shenandoah-8u412-b01.
- Switch to EA mode.
- Related: RHEL-30926 tory with temp-
- generate_source_tarball.sh: Remove temporary directory exit conditions
- generate_source_tarball.sh: Set compile-command in Emacs
- generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
- generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
- generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
- generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
- Use backward-compatible patch syntax
- generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
- generate_source_tarball.sh: Remove trailing period in echo
- generate_source_tarball.sh: Use long-style argument to grep
- generate_source_tarball.sh: Add license
- generate_source_tarball.sh: Add indentation instructions for Emacs
- Remove -T0 argument from systemtap tar invocation
- Related: RHEL-30926 eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
- generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
- generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
- generate_source_tarball.sh: Adapt version logic to work with 8u
- generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
- generate_source_tarball.sh: Update examples in header for clarity
- generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
- generate_source_tarball.sh: Only add --depth=1 on non-local repositories
- Move maintenance scripts to a scripts subdirectory
- icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
- jconsole.desktop.in: Restored by running icedtea_sync.sh
- policytool.desktop.in: Likewise.
- Restore IcedTea sources correctly in spec file
- discover_trees.sh: Set compile-command and indentation instruction s for Emacs
- discover_trees.sh: shellcheck: Do not use -o (SC2166)
- discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: Add authorship
- icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
- icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
- icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: Set compile-command and indentation instructions for Emacs
- openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
- openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
- generate_source_tarball.sh: Handle an existing checkout
- generate_source_tarball.sh: Sync indentation with java-21-openjdk version
- generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
- Related: RHEL-30926
8 2PgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f@- Update to shenandoah-jdk8u412-b08 (GA)
- Update release notes for shenandoah-8u412-b08.
- Complete release note for Certainly roots
- Switch to GA mode.
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Related: RHEL-30926DO Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf- Update to shenandoah-jdk8u412-b07 (EA)
- Update release notes for shenandoah-8u412-b07.
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- Resolves: RHEL-309267N eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Turn off xz multi-threading on i686 as it fails with an out of memory error
- Normalise whitespace
- Move to upstr
&2 T Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665oS UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665LR Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665
f -X QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'W{UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665V !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665U !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665
:ZwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{YyAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
r /; r _ !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665^ !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665] Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665o\ UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L[ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665
" T" -a QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'`{UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665
:cwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{byAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
: K : :g kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903Ef Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690e{
Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#19016900dcAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_:- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062
Aa :k kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903Zj +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_=- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903[i -Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_@- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903:h kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903
` :o kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081n7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963kmYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963 l Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903
l A" l 1r YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081q +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081:p kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081
X :v kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081:u kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081:t kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081ds ?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081
R q R :{ kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809Oz Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`@- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`@- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024x7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201kwYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n@- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201
AJ j KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809:~ kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`\- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809r} [Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea` @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809:| kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809
Ak 1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`t- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395: kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809: kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`E- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809
e r+V: e DA
919e733f2ea0f03322ddd4ac6824dcb44dd6d5fcaabb66ccb9afee48b8b78718D@
0b44e2a7472e36fcf462b7b85a5bbc147c95150b55e8d7e6dc3fe4977c7cdc76D?
f707cfc509f1fd8d7d482b5937245f4dbfc078d16c4defb7fef772d41daac079D>
c253a31b070bc89bcd355eeb3c549a299fb205b9c6badcc9d3e7254057f26ef3D=
6a35640d03a1109ec551440c9e15e05aac57712c85cd6644b826678181e23b5dD<
b436b196f3c2735dddfe5727a948d1a2e443bdebffd7018905aa2558baba56d9D;
3daac146d8edbefdb34bcb729d74336de8f1afbaee929dc55464706da7615618D:
46a04b65f068cbfdca98fdfb989911df818cda7f362078f3f1fdede4d819cc71D9
8b0d31d3b3732537ed9539107e868dbb4725488aa14e7a5070bee4b31e133318D8
1724001fdb91ff6c4e1fcf64bccf981017dfd7ab649f21c1333810e6cbd8e9c6D7
029a613293d1ba49b765f0f2ec6fc0b71f6fd43fb1ceff50f43e05dc84f98d20D6
bf1fe8afbf03b29de5f3eba68d356ac251478692658c6449b4cda08c73d4d4f8D5
5a11f15beb55665259230a77f5624af4b896062e2a61b610d31d355500431f88
6x " ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735
Z BPq Z 'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m
QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
a B a 9 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735" ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359
iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735
/ 'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735
G " ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735_AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
Z BPq Z 'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
q G q Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_ AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
>/q m" QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359! iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422= qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
!
P% Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809$'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z# +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929
=( qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q' Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_&AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366
a a *Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422
/ -'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z, +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m+ QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735
q G q Q0 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_/AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P. Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=1 qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,4[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
0 0 _7AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P6 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#20228095'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
Y *hY
:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=9 qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q8 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,<[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
7 _?AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366M> Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r=gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
Y *hY
BAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=A qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q@ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,D[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L fG CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191MF Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rEgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
QI Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529nH_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
/ >/
KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=J qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,M[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 LAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L fP CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191MO Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rNgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
nQ_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
d d R1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
p ,T[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 SAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L fW CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191MV Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rUgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
nX_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ Z }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106Y1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
t ?Ft M] Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695t\kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<[ oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
f^ CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191
n__Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ a }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106`1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) dqAJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319tckAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<b oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 f3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%eMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
\ d \ h }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106g1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) kqAJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319tjkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<i oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 m3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%lMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 dp ?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965xo gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914En
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
9 9 r3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%qMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 ^u?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965xt gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914Es
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
K , K Tw
Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Invoke xz in multi-threaded mode
- generate_source_tarball.sh: Add WITH_TEMP environment variable
- generate_source_tarball.sh: Multithread xz on all available cores
- generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
- generate_source_tarball.sh: Update comment about tarball naming
- generate_source_tarball.sh: Reformat comment header
- generate_source_tarball.sh: Reformat and update help output
- generate_source_tarball.sh: Do a shallow clone, for speed
- generate_source_tarball.sh: Eliminate some removal prompting
- generate_source_tarball.sh: Make tarball reproducible
- generate_source_tarball.sh: Prefix temporary direc &Ov Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae!@- Update to shenandoah-jdk8u412-b01 (EA)
- Update release notes for shenandoah-8u412-b01.
- Switch to EA mode.
- Related: RHEL-30926 tory with temp-
- generate_source_tarball.sh: Remove temporary directory exit conditions
- generate_source_tarball.sh: Set compile-command in Emacs
- generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
- generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
- generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
- generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
- Use backward-compatible patch syntax
- generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
- generate_source_tarball.sh: Remove trailing period in echo
- generate_source_tarball.sh: Use long-style argument to grep
- generate_source_tarball.sh: Add license
- generate_source_tarball.sh: Add indentation instructions for Emacs
- Remove -T0 argument from systemtap tar invocation
- Related: RHEL-30926 (eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
- generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
- generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
- generate_source_tarball.sh: Adapt version logic to work with 8u
- generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
- generate_source_tarball.sh: Update examples in header for clarity
- generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
- generate_source_tarball.sh: Only add --depth=1 on non-local repositories
- Move maintenance scripts to a scripts subdirectory
- icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
- jconsole.desktop.in: Restored by running icedtea_sync.sh
- policytool.desktop.in: Likewise.
- Restore IcedTea sources correctly in spec file
- discover_trees.sh: Set compile-command and indentation instruction s for Emacs
- discover_trees.sh: shellcheck: Do not use -o (SC2166)
- discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: Add authorship
- icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
- icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
- icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: Set compile-command and indentation instructions for Emacs
- openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
- openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
- generate_source_tarball.sh: Handle an existing checkout
- generate_source_tarball.sh: Sync indentation with java-21-openjdk version
- generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
- Related: RHEL-30926
8 2zgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f@- Update to shenandoah-jdk8u412-b08 (GA)
- Update release notes for shenandoah-8u412-b08.
- Complete release note for Certainly roots
- Switch to GA mode.
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Related: RHEL-30926Dy Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf- Update to shenandoah-jdk8u412-b07 (EA)
- Update release notes for shenandoah-8u412-b07.
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- Resolves: RHEL-309267x eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Turn off xz multi-threading on i686 as it fails with an out of memory error
- Normalise whitespace
- Move to upstr '
&2 ~ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665o} UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L| Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665{ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665
f - QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'{UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665 !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665 !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665
:wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
e r+V: e DN
c62386a6973d93798bd5a17ee72907932c0796c21589648ab5f313805f6ae46cDM
fa80c361dec771feb54951286af7bb8032aef89cd8ded021b942b091ad431e5dDL
5c0a4fb7b658b9dca77b858ff98bd534bbc056c94aa438b11b253b1da80720a4DK
a3461547f0108720d6413695a5d1110d735d6a9359910eca40e788f625bab184DJ
5b66719aa307b84457c7ac3edc58f4b71cc65248e0ef006e5fee0c3e52896b5fDI
707c34f7fa9d4787f56722da43ebdb1458d9855c217691d5688c6bde0306a2b7DH
575e728d855d72fba88b860be7518db2c8fa0dc1add9046074dd5d320e1156bbDG
be582ab129bf0e7739face571fb544ef2d038667883f4d15867fa2c2c302f748DF
c72c2effb396db8fd12fe1bf50dc5ae0543a4d684cc6990bc2a8f8c1c707bd2aDE
9deefb8ac4e6a1d43c4894b9e5daf58d70b43a9f12952164dc89a1d15e5a400cDD
0380151eff2395148f47a991620ec2bd74e74d330969f2c6d6c0a064a0278166DC
895038cbd6764ef3eb9ee3cd61f7aeb95255a9dab0f3a8da8ecf81d235a2abc1DB
3f73609586cbfb03e673487d50c8317cc03657e173b51bd38b9491c79062a838
r /; r !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665 !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665o UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665
" T" - QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'
{UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665
:
wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{ yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
: K : : kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903E Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690{
Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#19016900cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_:- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062
Aa : kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903Z +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_=- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903[ -Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_@- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903: kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903
` : kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#19380817Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963kYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903
l A" l 1 YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081 +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081: kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081
X : kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081: kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081: kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081d ?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081
R q R :% kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809O$ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`@- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`@- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024"7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201k!YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n@- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201
AJ j) KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809:( kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`\- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809r' [Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea` @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809:& kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809
Ak -1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735,'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`t- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395:+ kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809:* kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`E- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809
6x "2 ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#199973591 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#199973590 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359/ iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735. Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735
Z BPq Z 6'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z5 +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m4 QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#199973593 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
a B a 9; iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735": ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#199973599 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#199973598 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#199973597 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735
/ >'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z= +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m< QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735
G "A ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735_@AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P? Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
Z BPq Z E'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826ZD +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929mC QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359B iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
q G q QH Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_GAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366PF Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
>/q mL QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359K iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
JAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=I qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
!
PO Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809N'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826ZM +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929
=R qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529QQ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_PAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366
a a TAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
SAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422
/ W'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826ZV +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929mU QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735
q G q QZ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_YAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366PX Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=[ qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,^[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 ]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
0 0 _aAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P` Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809_'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
Y *hY
dAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=c qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Qb Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,f[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
7 _iAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366Mh Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rggAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
Y *hY
lAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=k qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Qj Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,n[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 mAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L fq CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191Mp Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rogAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695 bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ k !m "p #r $u %w )z *~ + , . / 0
1 2 3 4 5 6% 7) 8- 92 :6 ;; <> =A >E ?H @L AO BR CT DW EZ F\ G^ Ha Id Jf Ki Ll Mn Nq Ps Qu Rw Sz T{ U| V~ W X Y Z \ ] ^ _ ` a b c d e f g! k$ l( m, n. o2 p6 q8 r= s? tA uF vI wK xO yS zV {Z |^ }b ~e j m p u y }
Qs Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529nr_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
/ >/
uAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=t qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,w[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 vAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L fz CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191My Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rxgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n{_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
d d |1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
p ,~[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#22211061Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
t ?Ft M Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695tkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106< oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
e r+V: e D[
dfbc0cbaf5fb588c23fcfdacafa9024ed6efd13bfbb1cf69316269cbaee79463DZ
dfa6a2ee9076eba358c12de54d5d936a15a282109538f6772bdb75582afd0584DY
1112275758e024da6aed300ab9d35464cd221ed62c67a573bd71242d60a699bfDX
109d66ff27fd10890453e0e8e39139cafcd73f6341aac559e6f00b019b08a12fDW
1b30b4a38b3fef0e81dd1879d3e9b159f739eadedc3e869eb5947a4bd3b25968DV
fae889b06ab0ce312053475d9327bbc3ab774b5205f23a802574f40fb6dd1621DU
05a1a1334799c302fd4621a4dab067e901b9fbea4d7d269ebc6e9bea8d855923DT
0f67dd341c128a15768806e3944c813d90260a364561887b61378a18ff049547DS
0a551f7e2a238413dc99c1846c2fa6ce5424327eb7cae6cffdcc8530fe613c92DR
7a192ba7047354c7646edd4e2c5e44dc140a332186434319479f733ea0d3a469DQ
f1014b0e635f3231b9775aea6acf589330dd8192d714a231b5392dff24ffc861DP
fa816cfd764e59f3d6af36d6fe658eaf2ad7d0af0472a9bef2ab112995965b1fDO
5d35f8e8e692daf8ad4f89ccba227841148704f4f1a52d100f8d5555f6e2c562
f CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191
n _Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106
1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) qAJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319t
kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106< oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
\ d \ }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#22211061Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) qAJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319tkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106< oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 d ?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965x gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914E
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
9 9 3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 ^ ?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965x gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914E
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
K , K T!
Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Invoke xz in multi-threaded mode
- generate_source_tarball.sh: Add WITH_TEMP environment variable
- generate_source_tarball.sh: Multithread xz on all available cores
- generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
- generate_source_tarball.sh: Update comment about tarball naming
- generate_source_tarball.sh: Reformat comment header
- generate_source_tarball.sh: Reformat and update help output
- generate_source_tarball.sh: Do a shallow clone, for speed
- generate_source_tarball.sh: Eliminate some removal prompting
- generate_source_tarball.sh: Make tarball reproducible
- generate_source_tarball.sh: Prefix temporary direc hO Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae!@- Update to shenandoah-jdk8u412-b01 (EA)
- Update release notes for shenandoah-8u412-b01.
- Switch to EA mode.
- Related: RHEL-30926 tory with temp-
- generate_source_tarball.sh: Remove temporary directory exit conditions
- generate_source_tarball.sh: Set compile-command in Emacs
- generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
- generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
- generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
- generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
- Use backward-compatible patch syntax
- generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
- generate_source_tarball.sh: Remove trailing period in echo
- generate_source_tarball.sh: Use long-style argument to grep
- generate_source_tarball.sh: Add license
- generate_source_tarball.sh: Add indentation instructions for Emacs
- Remove -T0 argument from systemtap tar invocation
- Related: RHEL-30926 jeam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
- generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
- generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
- generate_source_tarball.sh: Adapt version logic to work with 8u
- generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
- generate_source_tarball.sh: Update examples in header for clarity
- generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
- generate_source_tarball.sh: Only add --depth=1 on non-local repositories
- Move maintenance scripts to a scripts subdirectory
- icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
- jconsole.desktop.in: Restored by running icedtea_sync.sh
- policytool.desktop.in: Likewise.
- Restore IcedTea sources correctly in spec file
- discover_trees.sh: Set compile-command and indentation instruction s for Emacs
- discover_trees.sh: shellcheck: Do not use -o (SC2166)
- discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: Add authorship
- icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
- icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
- icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: Set compile-command and indentation instructions for Emacs
- openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
- openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
- generate_source_tarball.sh: Handle an existing checkout
- generate_source_tarball.sh: Sync indentation with java-21-openjdk version
- generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
- Related: RHEL-30926
8 2$gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f@- Update to shenandoah-jdk8u412-b08 (GA)
- Update release notes for shenandoah-8u412-b08.
- Complete release note for Certainly roots
- Switch to GA mode.
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Related: RHEL-30926D# Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf- Update to shenandoah-jdk8u412-b07 (EA)
- Update release notes for shenandoah-8u412-b07.
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- Resolves: RHEL-309267" eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Turn off xz multi-threading on i686 as it fails with an out of memory error
- Normalise whitespace
- Move to upstr i
&2 ( Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665o' UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L& Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665% Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665
f -, QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'+{UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665* !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665) !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665
:.wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{-yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
&2 2 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665o1 UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L0 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665/ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665
f -6 QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'5{UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#18766654 !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#18766653 !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665
:8wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{7yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
r /; r = !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665< !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665; Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665o: UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665L9 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665
" T" -? QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'>{UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665
:AwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{@yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
W Kz W F !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665E Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665oD UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665LC Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#18766650BcAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_:- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062
f -I QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665'H{UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_9- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665G !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_@- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665
:KwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665{JyAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
: K : :O kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903EN Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690M{
Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#19016900LcAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_:- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062
Aa :S kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903ZR +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_=- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903[Q -Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_@- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903:P kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903
` ` V7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963kUYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963 T Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903
0 x 0 :Z kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903:Y kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903EX Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690W{
Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_j- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690
q A q ^ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903:] kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903Z\ +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_=- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903[[ -Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_@- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903
q :b kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081:a kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081`7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963k_YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963
B + B de ?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#19380811d YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081c +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081
4 A 4 j7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201kiYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n@- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201:h kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081:g kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081:f kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081
c Ac m +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081:l kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081:k kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081
Ja :p kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081do ?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#19380811n YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081
g A g uAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`@- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024t7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201ksYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n@- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201:r kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081:q kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081
,m ry [Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea` @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809:x kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809:w kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809Ov Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`@- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809
AR :} kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809:| kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`E- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809j{ KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809:z kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`\- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809
] : kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809O Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`@- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`@- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024~'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`t- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
AJ j KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809: kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`\- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809r [Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea` @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809: kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809
Ak 1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`t- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395: kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809: kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`E- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809
e r+V: e Dh
8468dd2d01e7228ce1d031241b5387d85911912180e2b91324d509c7631724aeDg
e2c654e3afba7eae27baf8ba94d32ce0d7b64ee9e4d712f07c55fe5511ac0e78Df
906005c50af3c97fba3c5a02b14b7ce32f662a5eafb00675e8750675b8323966De
ecf0213aa5f1df68903633d6e37f83ba74657dcdfef00998680e1d13d4107e9bDd
d8cc4f7ba48ecdc9de7b819650b043bff67e2a0f66f0100cff7b2021dfdb7019Dc
cd7ecade58c83774da56075ecbc93181d0299693efa4a31b09f39a234ea8c0d8Db
42a032cda37e42e63ccb183ecdaa7710140521828aa8549a8f19dd0bc7fbea36Da
88bc32f0b32b7bb8891d9dd012f0481bd2103ca60cadb3ebc387b8645c331524D`
c2c9b259e70aede7a57ebe7fa8a93a475866d4cce68f6b903edb0875c829bc6cD_
fe81316791b5a33fb6e458bc981914e5a5c7d16da0e818f6b455b94fd257fbd8D^
eb68e76343740b950f6fb531ed5af6afc884e16c3ca61bdb35b1d2115d73f0c4D]
eb2e226e824b06855d4cf867531fb5f3409412d883d6e56543603660748ecfbbD\
7f67e4364ed1e323c02f8bdeafb086bb8d6633c2da0a3139a1a54be82a87bdec
6x " ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#19997359
iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735
Z BPq Z 'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
dX 9 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#19997351Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735
Y Z +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735" ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735
+m 9 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735 'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
Y Z# +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m" QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359! iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735" ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735
0 0 _&AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P% Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809$'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
a B a 9+ iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735"* ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#19997359) iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#19997359( iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#19997359' iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735
/ .'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z- +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m, QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735
G "1 ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735_0AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P/ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
Z BPq Z 5'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z4 +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m3 QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#199973592 iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
q G q Q8 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_7AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P6 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
>/ 9< iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735"; ;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ@- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735
:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=9 qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
/ ?'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Z> +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929m= QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735
q G q QB Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_AAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366P@ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
>/q mF QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359E iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
DAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=C qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
!
PI Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809H'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826ZG +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929
=L qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529QK Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_JAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366
a a NAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422
Z BPq Z R'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826ZQ +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929mP QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#19997359O iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735
q G q QU Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_TAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366PS Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
WAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=V qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
~ p ~ mY QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735 XAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
!
P\ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809['Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826ZZ +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929
=_ qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q^ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_]AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366
a a aAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422
g O]~ g e'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Zd +Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf@- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929mc QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735,b[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383
q G q Qh Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_gAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366Pf Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
jAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=i qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,l[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
0 0 _oAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366Pn Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809m'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826
Y *hY
rAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=q qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Qp Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,t[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 sAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
7 w'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826Mv Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rugAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
q G q Qz Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529_yAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366Px Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809
/ >/
|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422={ qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,~[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
7 _AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366M Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
Y *hY
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422= qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
) ) _ AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a@- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366n
_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
e r+V: e Du
dda309e14f66aa1f8ced19d835b7e6ff04827b05e42baed38cfbde2ea01b3351Dt
d6029c8033366f8fa025ecb16d28c0d7ebe9ff2aa2c4b0f27fd5af20a22fc2d0Ds
52d1677bb4b0b6cf9d2e5dcd4c9cb2e58dee114d048654302dd20d27a8d31eceDr
f926be88eca8a48d3a20210809bb3b3034814e0660e27737f39f9db9589b332dDq
1a8bb6d0d5d3a9bbd2452e189a4bddbc5fb7dd910ae645de886896daf57d324bDp
9984ba09f2a5bb2165cfe6589c4861a4ae3214b1932e9978e0648e075937b182Do
ab64f5672ee9bcce92e16118c4c13b43b53597bb1ec2a50445c04cb3b9eeef74Dn
a9b3782c3c170d426ed6352d73a207121cb78d86ee04aff09e0065659d0cddb7Dm
ac4d6d11bf69e5b905738e3547274f544c6780aad810056708d4cdb6ef2f2842Dl
b1e27eaa8378961d1d5aa1cfe6e8b864169425ac61e6881ca154a93ccff6d67aDk
8a6cef14e08d6e8b37d66e40c1ac1a7bedf36720f015c5cf16ef968d5bd61eb9Dj
7315923a129e703d18cf9c04318c3fce2223c31b6b9d9f8742322e1c2bfd100dDi
8e64b7d56dda27658b854cd7ae4711c43c6b16b97ee01075b4c86e7bea44f202
Y *hY
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422=
qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529
p ,[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529n_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
/ >/
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422= qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529 bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ # & + . 1 5 8 < ? B F I L N R U W Y \ _ a e h j l o r t w z | ~ ! # & ' ( Á* ā- Ł. Ɓ0 ǁ2 ȁ4 Ɂ7 ʁ8 ˁ: ́= ́> ? ρA ЁD сF ҁH ӁI ԁK ՁN ցP ׁR U فW ځZ ہ\ ܁_ ݁a ށd ߁f i ၛk 偛n 恛p 灛s 聛u 쁛x 큛y {
p ,[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695rgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n _Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
d Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529 1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
/ >/
!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422= qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529
p ,#[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 "Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f& CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M% Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r$gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n'_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
d d (1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
p ,*[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 )Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f- CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M, Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r+gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n._Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ 0 }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106/1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
F ?F t2kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<1 oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
p ,4[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383 3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502
L 7 L f7 CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191M6 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695r5gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695
n8_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ : }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#222110691Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
t ?Ft M= Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695t<kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<; oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
f> CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191
n?_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ A }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106@1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) DqAJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319tCkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<B oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 F3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%EMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
C .C fH CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191MG Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695
nI_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1cG- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111
\ d \ K }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106J1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) NqAJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319tMkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<L oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 P3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%OMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
\ d \ R }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106Q1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) UqAJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319tTkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<S oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 W3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%VMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 dZ ?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965xY gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914EX
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
\ d \ \ }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead - Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106[1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>@- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458
) ?F) _qAJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319t^kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d8- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106<] oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead@- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106
9 9 a3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%`MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 dd ?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965xc gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914Eb
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
9 9 f3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%eMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 ^i?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965xh gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914Eg
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
K , K Tk
Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Invoke xz in multi-threaded mode
- generate_source_tarball.sh: Add WITH_TEMP environment variable
- generate_source_tarball.sh: Multithread xz on all available cores
- generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
- generate_source_tarball.sh: Update comment about tarball naming
- generate_source_tarball.sh: Reformat comment header
- generate_source_tarball.sh: Reformat and update help output
- generate_source_tarball.sh: Do a shallow clone, for speed
- generate_source_tarball.sh: Eliminate some removal prompting
- generate_source_tarball.sh: Make tarball reproducible
- generate_source_tarball.sh: Prefix temporary direc Oj Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae!@- Update to shenandoah-jdk8u412-b01 (EA)
- Update release notes for shenandoah-8u412-b01.
- Switch to EA mode.
- Related: RHEL-30926 tory with temp-
- generate_source_tarball.sh: Remove temporary directory exit conditions
- generate_source_tarball.sh: Set compile-command in Emacs
- generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
- generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
- generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
- generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
- Use backward-compatible patch syntax
- generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
- generate_source_tarball.sh: Remove trailing period in echo
- generate_source_tarball.sh: Use long-style argument to grep
- generate_source_tarball.sh: Add license
- generate_source_tarball.sh: Add indentation instructions for Emacs
- Remove -T0 argument from systemtap tar invocation
- Related: RHEL-30926 eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
- generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
- generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
- generate_source_tarball.sh: Adapt version logic to work with 8u
- generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
- generate_source_tarball.sh: Update examples in header for clarity
- generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
- generate_source_tarball.sh: Only add --depth=1 on non-local repositories
- Move maintenance scripts to a scripts subdirectory
- icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
- jconsole.desktop.in: Restored by running icedtea_sync.sh
- policytool.desktop.in: Likewise.
- Restore IcedTea sources correctly in spec file
- discover_trees.sh: Set compile-command and indentation instruction s for Emacs
- discover_trees.sh: shellcheck: Do not use -o (SC2166)
- discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: Add authorship
- icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
- icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
- icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: Set compile-command and indentation instructions for Emacs
- openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
- openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
- generate_source_tarball.sh: Handle an existing checkout
- generate_source_tarball.sh: Sync indentation with java-21-openjdk version
- generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
- Related: RHEL-30926
8 2ngAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f@- Update to shenandoah-jdk8u412-b08 (GA)
- Update release notes for shenandoah-8u412-b08.
- Complete release note for Certainly roots
- Switch to GA mode.
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Related: RHEL-30926Dm Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf- Update to shenandoah-jdk8u412-b07 (EA)
- Update release notes for shenandoah-8u412-b07.
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- Resolves: RHEL-309267l eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Turn off xz multi-threading on i686 as it fails with an out of memory error
- Normalise whitespace
- Move to upstr
9 9 p3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577%oMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577
69 ^s?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e@- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965xr gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eaeL@- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914Eq
Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19630
K , K Tu
Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Invoke xz in multi-threaded mode
- generate_source_tarball.sh: Add WITH_TEMP environment variable
- generate_source_tarball.sh: Multithread xz on all available cores
- generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
- generate_source_tarball.sh: Update comment about tarball naming
- generate_source_tarball.sh: Reformat comment header
- generate_source_tarball.sh: Reformat and update help output
- generate_source_tarball.sh: Do a shallow clone, for speed
- generate_source_tarball.sh: Eliminate some removal prompting
- generate_source_tarball.sh: Make tarball reproducible
- generate_source_tarball.sh: Prefix temporary direc Ot Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae!@- Update to shenandoah-jdk8u412-b01 (EA)
- Update release notes for shenandoah-8u412-b01.
- Switch to EA mode.
- Related: RHEL-30926 tory with temp-
- generate_source_tarball.sh: Remove temporary directory exit conditions
- generate_source_tarball.sh: Set compile-command in Emacs
- generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
- generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
- generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
- generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
- Use backward-compatible patch syntax
- generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
- generate_source_tarball.sh: Remove trailing period in echo
- generate_source_tarball.sh: Use long-style argument to grep
- generate_source_tarball.sh: Add license
- generate_source_tarball.sh: Add indentation instructions for Emacs
- Remove -T0 argument from systemtap tar invocation
- Related: RHEL-30926 eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
- generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
- generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
- generate_source_tarball.sh: Adapt version logic to work with 8u
- generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
- generate_source_tarball.sh: Update examples in header for clarity
- generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
- generate_source_tarball.sh: Only add --depth=1 on non-local repositories
- Move maintenance scripts to a scripts subdirectory
- icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
- jconsole.desktop.in: Restored by running icedtea_sync.sh
- policytool.desktop.in: Likewise.
- Restore IcedTea sources correctly in spec file
- discover_trees.sh: Set compile-command and indentation instruction s for Emacs
- discover_trees.sh: shellcheck: Do not use -o (SC2166)
- discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: Add authorship
- icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
- icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
- icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: Set compile-command and indentation instructions for Emacs
- openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
- openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
- generate_source_tarball.sh: Handle an existing checkout
- generate_source_tarball.sh: Sync indentation with java-21-openjdk version
- generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
- Related: RHEL-30926
8 2xgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f@- Update to shenandoah-jdk8u412-b08 (GA)
- Update release notes for shenandoah-8u412-b08.
- Complete release note for Certainly roots
- Switch to GA mode.
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Related: RHEL-30926Dw Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf- Update to shenandoah-jdk8u412-b07 (EA)
- Update release notes for shenandoah-8u412-b07.
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- Resolves: RHEL-309267v eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eaer- Turn off xz multi-threading on i686 as it fails with an out of memory error
- Normalise whitespace
- Move to upstr
g g yw3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695
f f {;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pzQAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#~AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?}yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 |7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
b 0bb {{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907K Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
g g w3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695
f f ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pQAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q # AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
b 0bb { {}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907K
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
e r+V: e D
43ba47c5fe93e659e2128f88d812fbff89a0212d3f97b085a69f6ec65e2a1b2aD
9b6758993720f8e305448717bc270151ffeedba84a7961f0c5e110065eb6f188D
17ed16fa6fa0dce15c8b3485e9d01613b70ef05e54ce42b4ead591c57c7f47aaD
d2619ceca8fca7e9ee19cea2143fbd219429e9f9b06409934c366c8d6fb4cefbD~
447af92c743509fb44207fbeccdb5f8b9f35865517ad94009935976e7e5339edD}
07b97f3f2c7b61f7d3f1361ef0cb40ea95320f3213ff8441345dd39ed092edffD|
176be26252edd9349f87c81796fa0c0c19ed3e8dbd43a82b201b7ebab75624edD{
f8d118dd0c38e6be586da71c24bb8639d30d388d9b57e276ec52b9ac2f649eadDz
a2e3eec180d90a42cea830a8b5f0fa6890394a9b51d4349667c8010da5d2d418Dy
88ac66f78b2cf64dc6ea2d02f58193bd752cb598be4fa33a9328f2bf4d42de00Dx
aba0487fc98846f969d23ad65f98b2fddc20c5a9ecbd166216fb523452d2cb47Dw
0768c02eab146e2f88cb0c3f41aee2d4f7b14dbdde274b3955f2155eb21cf944Dv
322851c3e3042c4bb07d4bb68b94af8a35852bcac51ee3546cab4f53bc08392b
f f ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907p
QAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
0bb {1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602{{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
f f ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pQAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q # AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
0bb {1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602{ {}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907K Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
+ 9 + $}Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a@- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&' is not treated as a special character by the shell.
- Resolves: rhbz#1938082##AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527! Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527
` X` ` {){}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#(AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#'AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082#&AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082#%AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`aA- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082
dXE #-AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527+ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527*{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736
R J R #2AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#1AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082#0AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082#/AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`aA- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082 .}Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a@- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&' is not treated as a special character by the shell.
- Resolves: rhbz#1938082
d {7{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#6AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#5AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#19380824{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736{3{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228
d\ #;AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`@- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811#:AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811[91Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#19678118{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736
;; #?AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082{>{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395]=5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811^<7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811
\ XX \ [C1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811B{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736{A{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#@AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082
X ]G5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811^F7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811#EAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`@- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811#DAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811
z z KmSJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936{J{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395]I5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811{H{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
? W: ? WO)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936N{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936M{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$L{OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873
XX ]S5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811 R{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{Q{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#PAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936
\ W{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$V{OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873 UmSJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936{T{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
] a] ] {[{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#ZAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WY)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936X{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936
[ _{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936^{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$]{OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873 \{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332
W W c{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{b{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#aAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936W`)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936
1 $g{OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873{f{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qe]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jdw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810
@ D @ #kAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936Wj)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936i{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936h{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936
[ qo]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jnw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 m{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{l{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332
D D r{; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936q{7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936{p{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
W W v{G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{u{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#tA Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936Ws) Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936
1 z{A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{y{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qx] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jww Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810
@ D @ #~AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936W})Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936|{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936{{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936
[ q]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 {GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332
^ Jw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 {GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332 {AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810
D %}~ D {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+
{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z {{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422# AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V
'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
e r+V: e D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[ {{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 {GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332
, ^ , +{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 {AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805
^ v ^ {AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422
D %}~ D {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+ {]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z {{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422# AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
W ;"{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$!m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
%{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{${}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q#]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810
D %}~ D *{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+){]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z({{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#'AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V&'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
W ;,{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$+m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
^ #0AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V/'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 .{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{-{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
Q $4m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#21065103{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+2{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z1{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422
;5{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
g B g V9'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 8{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{7{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#20393666{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
v XY v $>m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510={Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+<{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z;{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#:AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531 bR dRY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ $ ) - 2 7 ; ? C G K O S W [
_ c g
k o r v z ~ " % * , 0 !4 "5 #9 $> &? 'B (C )G *K +M ,Q -T .X /[ 0^ 1b 2e 3h 4l 5n 6q 7t 8w 9z :} ; < = > ? @ A B D E F H I J" K% M( N+ P. Q0 R3 S7 U9 V< X@ YC ZF \J ]N ^T _Y `^ ac bg cl
;?{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
Z $Bm]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510A{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422@{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
;C{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
W 4GcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731F]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373RE Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373D{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
d \ d K{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422&J{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>I{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 H9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
W ;M{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$Lm] Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
W 4Qc Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731P] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373RO Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373N{5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &T{S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>S{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 R9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
W 4Xc
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731W]
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373RV
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373U{5
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &[{S
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>Z{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 Y9
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }^}
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q]]
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&\G
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
W 4bc Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731a] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373R` Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373_{5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &e{S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>d{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 c9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }h} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qg] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&fG Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
* J* >l{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 k9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#21303734jc Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731i] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373
* U* &nG Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&m{S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
q} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}p} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qo] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
- - 4tc
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731s]
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373_r{E Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
\ &w{S
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>v{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 u9
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }z}
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qy]
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&xG
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
M t M >}{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695_|{E
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182{}
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111
* U* &GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&~{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q ]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
XT >{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
* U* & GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111} }Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q
]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_
{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
XT q]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
e r+V: e D
47f52ae65081a918aa822fb28261dafe5b707b012d7f07714f3beff7a4d49f45D
d7d58e3708a957c3e2d7c60c347de4ffa8baf7169446426889d9fd0618af02c9D
637c8c01ec07ac21fcb709f52f870af6526eaa83bd2915683f8a6f983072e500D
da13c76a95a624d2a68550bf3fcf6a40650e79fef0cb040d51e46aa293093fb8D
580eedc42430dabee13298aaafa5f6d0828a7c8ee03e48cc34e248044b273c98D
2f0d2a97bc011f105608fc115346133185d5789361484a950ec00bcc5e36bc70D
1e8d63f3eb80cd678a21631ab2ebcb9b62ce51bba0f293bfe51b327fad1145e2D
102055158159425115e1f789e5fc2320b09a7a6f4b5b764de3614f437bfa3e71D
f878ae8eff1fab58c570c743d050866a386253258cd06a481221516b31ab7bc9D
134406c95bb0e98bfe18a35cc06ff8a3deca7248e9196efcee6eb05a7a0dcd55D
ff8272f92c772a5d757bacb85570f4468e0c2c40956746d49494f1daa5041086D
98d431e1523dbb3f7b2df74717a2e41dc1d70f15e80c7fdb07bb88cc13a58c4dD
47479ca82c3c2c2c7d65a383dba4f54f39f315bfe0571d1d9129c0d4101abdd8
r _{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192
! %! {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106.WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106
I I ,{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd GmAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111} }Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i . WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_ {EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
( XT ( '"{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229!{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106# AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
u _%{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182,${_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd L#mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
! %! ({Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#'AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106.&WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106
I I ,+{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd O*mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'){UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
? 8=? y.{yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v-gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C,{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
i i .0WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_/{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
( XT ( '3{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#22362292{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#1AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
u v7gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C6{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642,5{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd T4mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
9{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106y8{yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966
I I ,<{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd W;mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320':{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
^ 8=? ^ \@}=Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae!@- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaroundy?{yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v>gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C={
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
} C{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106&Bs[Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds~As Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914
I I ,F{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd [EmAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'D{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
^ 8=? ^ \J}=Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae!@- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaroundyI{yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966vHgAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031CG{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
n } n
NSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_A- Update static-libs packaging to new layout
- Resolves: rhbz#1876665PM#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_@- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
- Resolves: rhbz#1876665&Ls[Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds~Ks Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914
s O s TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665SSs5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_F- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}R{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_E- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zQyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_D- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#18766650PcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_C- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665zOyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_B- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665
/ < / zYyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_B- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665
XSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_A- Update static-libs packaging to new layout
- Resolves: rhbz#1876665PW#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_@- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
- Resolves: rhbz#1876665Vw?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KUw!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
KLt ^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665S]s5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_F- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}\{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_E- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665z[yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_D- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#18766650ZcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_C- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665
: : Scs5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_B- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}b{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_A- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zayAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_@- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665`w?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665K_w!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
}-
gw Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610fw?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665Kew!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665dAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665
| &{ | }l{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_A- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zkyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_@- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665&jwWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_#- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530]iwESeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275shiJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609
' (U '
qw Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610pw?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665Kow!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665nAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665Sms5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_B- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665
{ &{ &twWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_#- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530]swESeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275sriJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609
g g uw3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695
f f w;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pvQAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#zAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?yyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 x7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
b 0bb {~{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I}
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907K|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
g g w3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695
f f ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907p QAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
b 0bb {{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
f f
; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907p Q Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#
A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907? y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
0bb {1 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602{{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907K Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
e r+V: e D)
70b5a86232c1ba2b2535285ea1e7951e1c2ce4779402d9ef8b14a9e2574922c4D(
386d6eeb6ec186c7d3ac868781a062f7659e7f29629bf7919767ced443ced16eD'
6afa89d1f93f0c18b712d80864bb7c05453680e7c2ef4267277d1a05fc5f3ed5D&
91265a7a7ea601e581e1e9d0927369baa2509184619fcbfe483ba909db979caaD%
7b73f05a3cad8a9e27146ed66584c90db157d3c8dd9073156714b06d53ae16b4D$
569c3afb20ee7aa02a316df5870c65b53bb314376059e9e761ab3e81622b3891D#
245bfc9c157989c74777ef47e429b5b2823da6b25f940cc71fd0fae7aa230185D"
5effb3b9f9c3b2e58564ce52ef1e7d855cc8030a6d8903d0d257eb9a2f166a73D!
708f19a2413ea0ae0ab9a7619a05c06675c69004d477b56b71ac6ec988ee1cc4D
c1a1ba3ae8f745008a0b7e5c0e4663241db1a386d16bd54eef846e125686cebaD
02f897ee795a6592d97ca15c780cbdd6ca2bc2a793d53ef279ad3f01f27d472cD
f72a7e95336d9380f37c46d2de0b736c876a15b4c1e7dbb4c351ca2552bbc411D
6eb48672224acb21d0dbc83835af74ba98ee85d8e9d3991623af2bc0d57d6761
f f ; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pQ Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
0bb {1 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602{{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907K Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
+ 9 + } Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a@- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&' is not treated as a special character by the shell.
- Resolves: rhbz#1938082# A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527
` X` ` {%{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#$A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082##A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082#"A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082#!A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`aA- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082
dXE #)A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082( Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527' Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527&{5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736
R J R #.A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#-A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082#,A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082#+A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`aA- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082 *} Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a@- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&' is not treated as a special character by the shell.
- Resolves: rhbz#1938082
d {3{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#2A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#1A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#19380820{5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736{/{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228
d\ #7A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`@- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811#6A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811[51 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#19678114{5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736
;; #;A!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082{:{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395]95 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811^87 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811
\ XX \ [?1!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811>{5!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736{={}!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#<A!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082
X ]C5!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811^B7!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811#AA!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`@- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811#@A!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811
z z GmS"Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936{F{}"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395]E5"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811{D{}!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
? W: ? WK)"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936J{;"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936I{7"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$H{O"Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873
XX ]O5#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811 N{G"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{M{}"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#LA"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936
\ S{7#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$R{O#Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873 QmS#Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936{P{}#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
] a] ] {W{}#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#VA#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WU)#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936T{;#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936
[ [{;$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936Z{7$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$Y{O$Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873 X{G#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332
W W _{G$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{^{}$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#]A$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936W\)$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936
1 $c{O%Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873{b{}$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qa]$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810J`w $Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810
@ D @ #gA%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936Wf)%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936e{;%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936d{7%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936
[ qk]%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jjw %Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 i{G%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{h{}%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332
D D n{;&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936m{7&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936{l{}%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
W W r{G&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{q{}&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#pA&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936Wo)&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936
1 v{A&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{u{}&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qt]&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jsw &Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810
@ D @ #zA'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936Wy)'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936x{;'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936w{7'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936
[ q~]'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810J}w 'Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 |{G'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{{{}'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332
^ Jw (Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 {G(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332 {A'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{}'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
{A(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{}(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q](Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810
D %}~ D
{(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+ {](Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#A(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V'(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
[ {{})Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q
])Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810J w )Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 {G)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332 bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ et fu gw h{ i~ j k l m n
o p r s t u v% w) x. y3 z7 {; |? }C ~G K O S W [ _ c g k n r v z ~
! & ( , 0 1 5 : ; > ? C G I M P T W Z ^ a d h j m p s v y { ~
Á ā! Ɓ$ ǁ' Ɂ* ʁ, ˁ/ ́3 5
, ^ , +{])Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#A)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V')Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 {A)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805
^ v ^ {A*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{}*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q]*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810{)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422
e r+V: e D6
5830fa7abe16fd9ef562c14318f17462eb9ebe4e2473b4b94827dab6efc8cb5bD5
33f79495a144745f0bf779634202c2e16ec9ce1d545d08ada1d51ff124397d75D4
bbfa941de4ca08de5ac2912c49346b26f8b10f79c9dedcc1c73b7593d728b8d9D3
5732a4798be4c87badb456e95d85a69fdcc47d79f536cdf10bf8bfe8ac5353abD2
f97f8b49e1c67b65e3bc3821a5542f91cff1d9241f858a36d041fae368a1f2fcD1
08b94d6efe931c32344ea97bafacefaf26b7ab57c499ee718b7466ba31c94321D0
a5344af6f4e55dc3241835e173e61da3faccff81e74b16a504ca025d31166199D/
82943aa98d57823fabd6521b0364b533551b4f5b299febc13bc41d5342b5583cD.
2d39e047ddef688bbc3b526d384126a7602bf927866cbbd6d9306cf24221253dD-
0781ec76d6ef76f218a16289f31a21e27af4064a2fa1f213a49828a67e50c669D,
d434ab93e69642120974f37b28bf06b2fc55a8b51e2bb5b62b339413bcc1b605D+
6bba16931590ee051b717e6cc7eaf6319e483746bab088b484dada27e5f230d5D*
4660a5a7faa79cea2990c384533fca3da9b3ac6afdf6f55b36b2cad51352c3e0
D %}~ D {*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+{]*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#A*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V'*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
W ; {}*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$ m]*Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
!{A+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{ {}+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q ]+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810
D %}~ D &{+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+%{]+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z${{+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422##A+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V"'+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
W ;({}+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$'m]+Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
^ #,A,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V+',Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 *{A,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{){},Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
Q $0m],Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510/{,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+.{],Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z-{{,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422
;1{},Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
g B g V5'-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 4{A-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{3{}-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#20393662{5,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
v XY v $:m]-Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#21065109{-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+8{]-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z7{{-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#6A-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531
;;{}-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
Z $>m].Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510={.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422<{5-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
;?{}.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
W 4Cc.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731B].Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373RA .Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373@{5.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
d \ d G{/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422&F{S.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>E{.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 D9.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
W ;I{}/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$Hm]/Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
W 4Mc/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731L]/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373RK /Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373J{5/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &P{S/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>O{/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 N9/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
W 4Tc0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731S]0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373RR 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373Q{50Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &W{S0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>V{0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 U90Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }Z}0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qY]0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&XG0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
W 4^c1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731]]1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373R\ 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373[{51Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &a{S1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>`{1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 _91Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }d}1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qc]1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&bG1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
* J* >h{2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 g92Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#21303734fc2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731e]2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373
* U* &jG2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&i{S2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
m}2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}l}2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qk]2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
- - 4pc3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731o]3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373_n{E2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
\ &s{S3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>r{3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 q93Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }v}3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qu]3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&tG3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
M t M >y{4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695_x{E3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182w}3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111
* U* &{G4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&z{S4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
~}4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}}}4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q|]4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i . W4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_{E4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
XT >{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695{4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#A4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
* U* &G5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&{S5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
}5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}}5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q]5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .
W5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_ {E5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
XT q
]6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192 {5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106# A5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
r _{E6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182}6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}}6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192
! %! {6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#A6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106.W6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106
I I ,{_6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd mA6Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'{U6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
e r+V: e DC
6b0ef069c7763a3ba0b61d3804a6919fa06467de6088cbbcda7c568dfc3309b0DB
62730a490f70fb743015316019c09c1992ef54947750f054eaaf08ff9a387163DA
e3e0d812a13816d47ae085d4f88c2d0f4d8affad6568434ab0f720442981017bD@
d81b0c0ebf60fb1b4d6ccb36f93b9d93064cf246ecff7f7c16b2ddbb61c57c91D?
0a5287477758b2371bd5090dfacaf9dd93c3f1cc379245204f8a143593599b48D>
f24dce379d6c501f95ff094a43c786cc4932cecf9af4ed5ad162b4159d5a2007D=
645b31999a5a9633d017660dd3029d098a23145a02bcc776967acb3d0414464cD<
e2febf7854a5223cbd8ac5101e3cb5cc8a2a9ac22a6ed7712ad25b139199fee2D;
107479062ac7d45131a7f63b41712cb8d8bbc15a68e65ae36bc4612536690957D:
c6578be082e094285bfff45773f10ef576902f4e6d7f9f5a58b810e7e4d8ab9aD9
d64ee0696017c879c9cac304b66dad0523eafec9464a87a647d5b5c2a19e2466D8
db87f894acc24775904c7b50e997fa12818c4c6368e17139307fd37433372e1eD7
5e128b028063e43ec93a59c4107b46344a43bc260f99578b7c4a2b788885cc7e
}7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}}7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q]7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .W7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_{E7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
( XT ( ' {U7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 {7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106# A7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
u _!{E8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182, {_7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd ł mA7Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
! %! ${8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106##A8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106."W8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106
I I ,'{_8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd Ȃ&mA8Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'%{U8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
? 8=? y*{y8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v)g8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C({
8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
i i .,W9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_+{E9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
( XT ( '/{U9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229.{9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#-A9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
u v3g9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C2{
9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642,1{_9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd ͂0mA9Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
5{:Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106y4{y9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966
I I ,8{_:Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd Ђ7mA:Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'6{U:Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
^ 8=? ^ \<}=:Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae!@- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaroundy;{y:Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v:g:Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C9{
:Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
} ?{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106&>s[:Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds~=s :Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914
I I ,B{_;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd ԂAmA;Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'@{U;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
^ 8=? ^ \F}=;Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae!@- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaroundyE{y;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966vDg;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031CC{
;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
n } n
J<Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_A- Update static-libs packaging to new layout
- Resolves: rhbz#1876665PI#<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_@- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
- Resolves: rhbz#1876665&Hs[;Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds~Gs ;Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914
s O s P<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665SOs5<Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_F- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}N{<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_E- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zMy<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_D- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#18766650Lc<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_C- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665zKy<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_B- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665
/ < / zUy=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_B- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665
T=Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_A- Update static-libs packaging to new layout
- Resolves: rhbz#1876665PS#=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_@- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
- Resolves: rhbz#1876665Rw?<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KQw!<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
KLt Z=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665SYs5=Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_F- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}X{=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_E- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zWy=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_D- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#18766650Vc=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_C- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665
: : S_s5>Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_B- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}^{>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_A- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665z]y>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_@- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665\w?=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665K[w!=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
}-
cw >Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610bw?>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665Kaw!>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665`>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665
| &{ | }h{?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_A- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zgy?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_@- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665&fwW>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_#- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530]ewE>Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275sdi>Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609
' (U '
mw ?Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610lw??Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665Kkw!?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665j?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665Sis5?Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_B- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665
{ &{ &pwW?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_#- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530]owE?Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275sni?Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609
g g qw3@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695
f f s;@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907prQ@Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #wA@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#vA@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?uy@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 t7@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
b 0bb {z{}@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970Iy
@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907Kx@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
g g {w3AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695
f f };AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907p|QAAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #AAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907# AAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?yAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 ~7AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
b 0bb {{}AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I
AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907KAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
f f ;BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pQBAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #
ABAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907# ABAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?yBAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 7BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
0bb {1BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602{
{}BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I
BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907K BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
f f ;CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pQCAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #ACAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#ACAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?yCAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 7CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
0bb {1CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602{{}CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I
CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907KCAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
e r+V: e DP
3e729bea301dda80bd7dad924182af1a8859d3473da42b7cb9ed78adebef8963DO
1b9fbe198a3af7e79bb697022c8043d39441c77daf5446b0e0b8e7f5c18603c8DN
5a64f67b760664231aa056ce36899a472656f882e163cec3ee2c913fe4b34140DM
b1355c30321cdcfe6f3fc6298e8e7995196ed2edc8127aa23cee6fb0def56d65DL
5dc4485c972bd78d1637297056bbcc819f90e800c1681f449d5ab226d2b8772bDK
b620f989048c7f2f276ae3cbc4a5217f51cff7aad191e75030d927f8022e7c5aDJ
8b57170fd0541d89c862ecea52f823ede947a5b16983a9646cf0c6e4970996b4DI
fed7b567e393c86119acb36d69b38b769bcb51e24ddcf415141d81230fdc54a8DH
f87df491c22e76385180845739c13ba05724afcded006f1e0f2114ff956460e9DG
5b9c35a49f05bdae1d6d9ae13688adb2f1aa9eed15604ea80e3126af3ad89c77DF
1a762e2d8882a0c051d0a322eb97ba3c2fbdb843e16699bb702cecd284f238faDE
905c6cb39018d44fe1113513cbf517b142fbc537206ae23c0ce00c299f5e39a4DD
7f18b428cb0449058380cba27d10eac85a6389b6c3393ef6454032f2dda04023
+ 9 + }DJayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a@- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&' is not treated as a special character by the shell.
- Resolves: rhbz#1938082#ADAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527 DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527
` X` ` {!{}DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228# ADAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082# ADAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082# ADAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082# ADAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`aA- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082
dXE #%AEAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082$EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527# EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527"{5DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736
R J R #*AEAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#)AEAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082#(AEAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082#'AEAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`aA- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082 &}EJayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a@- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&' is not treated as a special character by the shell.
- Resolves: rhbz#1938082
d {/{}FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#.AFAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#-AFAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082,{5EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736{+{}EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228
d\ #3AFAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`@- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811#2AFAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811[11FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#19678110{5FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736
;; #7AGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082{6{}FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395]55FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811^47FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811
\ XX \ [;1GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811:{5GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736{9{}GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#8AGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082
X ]?5GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811^>7GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811#=AGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`@- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811#<AGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811
z z CmSHJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936{B{}HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395]A5HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811{@{}GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
? W: ? WG)HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936F{;HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936E{7HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$D{OHSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873
XX ]K5IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811 J{GHAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{I{}HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#HAHAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936
\ O{7IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$N{OISeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873 MmSIJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936{L{}IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
] a] ] {S{}IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#RAIAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WQ)IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936P{;IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936
[ W{;JAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936V{7JAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$U{OJSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873 T{GIAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332
W W [{GJAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{Z{}JAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#YAJAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WX)JAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936 bR 7RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ с< ҁ? ӁB ՁF ցJ ׁP U فZ ځ_ ہc ܁h ݁m ށp ߁q s ၡw z ち{ 䁡} 偢 恢 灢 聢
遢 ꁢ 끢 쁢 ! % * / 3 7 ; ? C G K O S W [ _ c g j n r v z ~
" $ ( , - 1 6 7 : ; ? C E I L P !S "V #Z $] %` &d 'f (i )l *o +r ,u -w .z /| 0 1 2 3 4 5 6
1 $_{OKSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873{^{}JAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q]]JAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810J\w JJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810
@ D @ #cAKAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936Wb)KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936a{;KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936`{7KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936
[ qg]KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jfw KJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 e{GKAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{d{}KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332
D D j{;LAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936i{7LAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936{h{}KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
W W n{GLAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{m{}LAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#lALAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936Wk)LAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936
1 r{ALAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{q{}LAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qp]LAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jow LJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810
@ D @ #vAMAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936Wu)MAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936t{;MAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936s{7MAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936
[ qz]MAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jyw MJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 x{GMAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{w{}MAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332
^ J~w NJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 }{GNAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332 |{AMAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{{}MAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
{ANAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{ {}NAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q]NAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810
D %}~ D {NAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+{]NAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{NAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#ANAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V'NAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
[ {
{}OAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q ]OAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jw OJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 {GOAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332
, ^ , +{]OAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{OAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#
AOAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V 'OAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 {AOAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805
^ v ^ {APAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{}PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q]PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810{OAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422
D %}~ D {PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+{]PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#APAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V'PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
W ;{}PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$m]PJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
e r+V: e D]
bd616a68bac2dba0c3050b8d3da7ce5d016fa05d03d2c3ca41e478309141d6d8D\
026420613efcc87726ba91b165fc0b746ce24ff329555220967db5cc979a803aD[
5dfcf8baeded2f96a2597b878a1006d7eb03d4d61927a000e1528dd9008b0671DZ
d47daec1adb6903ec50993bb856136c6ca6c1d28610a211a0082c8b683162941DY
bce793675eea8330ee5714f685ee6bf75de56dd9f106dbbe3149d9fa9d144416DX
acb345f09856db7783a06a30026e252117dbee4274e86ea5b3c2959410f22b01DW
a71605698db58a372ff02ab6d78041cca4507c94f4bdc16507ec30994e53892fDV
fdcabd5524523efc4fa2f438cdb2f40de42b6606b73bbff9e8f65e21ea81f437DU
0e30ee127b67a51aaff1ffe3ae0cb616b808bc21850fe2f23be2b229a8bb8853DT
f81e7c1a0f24f7ca56cedc1938c0e1bba78c74ad082589529118fe1d795d6748DS
5f692d98607238270b572db3bdedd64d8b9eb468b0cc08cead1d6b23aae63718DR
7f5933636add693e7d9a57c9d29615c25c2163009b4d680b43a93c0f252fc3c4DQ
d91a5237171093f889f2e37c55c5cbf4f02728ff2fb050c08f0547c1c7cf5f63
{AQAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{ {}QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q]QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810
D %}~ D "{QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+!{]QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z {{QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422# AQAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V 'QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
W ;${}QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$#m]QJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
^ #(ARAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V''RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 &{ARAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{%{}RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
Q $,m]RJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510+{RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+*{]RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z){{RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422
;-{}RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
g B g V1'SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 0{ASAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{/{}SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366.{5RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
v XY v $6m]SJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#21065105{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+4{]SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z3{{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#2ASAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531
;7{}SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
Z $:m]TJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#21065109{TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#20734228{5SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
;;{}TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
W 4?cTAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731>]TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373R= TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373<{5TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
d \ d C{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422&B{STAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>A{TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 @9TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
W ;E{}UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$Dm]UJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
W 4IcUAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731H]UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373RG UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373F{5UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &L{SUAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>K{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 J9UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
W 4PcVAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731O]VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373RN VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373M{5VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &S{SVAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>R{VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 Q9VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }V}VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qU]VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&TGVAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
W 4ZcWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731Y]WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373RX WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373W{5WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &]{SWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>\{WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 [9WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }`}WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q_]WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&^GWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
* J* >d{XAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 c9XAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#21303734bcXAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731a]XAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373
* U* &fGXAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&e{SXAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
i}XAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}h}XAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qg]XAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
- - 4lcYAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731k]YAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373_j{EXAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
\ &o{SYAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>n{YAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 m9YAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }r}YAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qq]YAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&pGYAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
M t M >u{ZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695_t{EYAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182s}YAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111
* U* &wGZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&v{SZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
z}ZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}y}ZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qx]ZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .|WZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_{{EZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
XT >{[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695~{ZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#}AZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
* U* &G[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192& {S[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
}[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}}[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q][Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .W[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_{E[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
XT q ]\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192{[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#A[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
r _ {E\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182 }\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}
}\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192
! %! {\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#A\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106.
W\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106
I I ,{_\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd 8mA\Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'{U\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
}]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}}]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q]]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .W]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_{E]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
( XT ( '{U]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#A]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
u _ {E^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182, {_]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd =mA]Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
e r+V: e Dj
0b25bab3a8a0341d22387d3674f6676645e3d3d497d2de92de115a56fa012b1bDi
33ead8c29c4da7be1c35398bea14adbd1069eb04196df8a75ddffab71562e778Dh
0de12d2701881f7f8bd093302babcb112ad65af4943bd2e0d2bcb2884f12012dDg
89818b9dde137228b185c849e8eec7f90bed6867be5b294a8b8121f52776af6aDf
f2a450757e610e9d7a49050e04cab12edad074ddca95fd92a67972bd61fcbabaDe
0f4b94a13ab49a4fb2ac8ff3106cdaa6e83e43757720457189e685e7a55ed6d6Dd
970a62a2a5e145cc2c8fa7e55e770b427abb4943c6d8e85bb81c928a192bb407Dc
22d64046fb95580843be1a65bdeaa8f2a9beca7721f0af5f20f9263a59cc2977Db
c76bb943b6a1a6711f5c6301f55730c1b173e983e6b7b095c9d0135c7b6a52f0Da
7abbb0853851a20592aac6a51b52bbe28466f3f0ee1d83a240a39b4e4f336537D`
2f2f67956f80076c79a81d009a5aee971589176deeda7985a84ca07ae0164a5aD_
3603a5475d52875262a18bc253888633c218b9df5c6fbdfad0972c07da32b981D^
72866ddd3fc9bb8286ebd7b4f6c5d977fc3e7925268a253cfefe4511c6e90150
! %! {^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106# A^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106. W^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106
I I ,#{_^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd A"mA^Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'!{U^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
? 8=? y&{y^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v%g^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C${
^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
i i .(W_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_'{E_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
( XT ( '+{U_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229*{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#)A_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
u v/g_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C.{
_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642,-{__Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd F,mA_Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
1{`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106y0{y_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966
I I ,4{_`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd I3mA`Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'2{U`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
^ 8=? ^ \8}=`Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae!@- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaroundy7{y`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v6g`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C5{
`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
} ;{aAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106&:s[`Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds~9s `Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914
I I ,>{_aAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd M=mAaJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'<{UaAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
^ 8=? ^ \B}=aAnton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae!@- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaroundyA{yaAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v@gaAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C?{
aAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
n } n
FbSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_A- Update static-libs packaging to new layout
- Resolves: rhbz#1876665PE#bAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_@- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
- Resolves: rhbz#1876665&Ds[aAnton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds~Cs aAnton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914
s O s LbAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665SKs5bJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_F- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}J{bAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_E- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zIybAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_D- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#18766650HcbAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_C- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665zGybAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_B- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665
/ < / zQycAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_B- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665
PcSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_A- Update static-libs packaging to new layout
- Resolves: rhbz#1876665PO#cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_@- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
- Resolves: rhbz#1876665Nw?bAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KMw!bAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
KLt VcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665SUs5cJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_F- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}T{cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_E- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zSycAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_D- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#18766650RccAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_C- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665
: : S[s5dJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_B- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}Z{dAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_A- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zYydAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_@- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665Xw?cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KWw!cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
}-
_w dSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610^w?dAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665K]w!dAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665\dAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665
| &{ | }d{eAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_A- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zcyeAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_@- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665&bwWdAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_#- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530]awEdSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275s`idJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609
' (U '
iw eSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610hw?eAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665Kgw!eAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665feAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665Ses5eJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_B- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665
{ &{ &lwWeAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_#- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530]kwEeSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275sjieJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609
g g mw3fAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695
f f o;fAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pnQfAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #sAfAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#rAfAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?qyfAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 p7fAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
b 0bb {v{}fAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970Iu
fAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907KtfAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
g g ww3gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695
f f y;gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pxQgAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #}AgAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#|AgAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?{ygAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 z7gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
b 0bb { {}gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I
gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907K~gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
f f ;hAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pQhAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #AhAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#AhAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?yhAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 7hAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
0bb
{1hAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602{ {}hAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I
hAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907KhAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
f f ;iAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907p QiAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #AiAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#AiAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?yiAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907
7iAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
0bb {1iAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602{{}iAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I
iAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907KiAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
+ 9 + }jJayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a@- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&' is not treated as a special character by the shell.
- Resolves: rhbz#1938082#AjAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082jAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527 jAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527
` X` ` { {}jAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228# AjAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#AjAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082#AjAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082#AjAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`aA- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082
dXE #!AkAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082 kAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527 kAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527 {5jAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736
e r+V: e Dw
3038e1befe3903f7b2bfb4fb5ed1ee07a0ba36db33ae2aae4ba05e4040d2b65fDv
1619875cba8598818f4bb31d4ba22a7d88804cab9b8ed1e66cb4cf18b1b446cbDu
ecd28bfd8a7f97d111587dec88746bdc8143ed9ea22a73f2c05141e5361dc7c2Dt
0f91ee82a0f353071438675ca34ab961c867b90d20e8e45c2472604fdc1165ecDs
d5fa6533d980b7889d1404f6dda42ce2de80411d4079bd78b7ce3257cb36e5deDr
d24b5e95b20420b1e37b28037c9bd5175c6fbfd17e6a78347fb26b2792a126efDq
237858b698163e9a4615ec1ab98636d66cd7e26deb3512708bd88164019a1994Dp
2e548be4d940969b8feee6cc4ffb8dde5ac295e684713eba0f96b20f287e7b40Do
cd2e66ab8554e43fed6cf3a6fe7067b925de6a4ebe0acd82af46e341ce011229Dn
5ec49c65245b5b4768c2ac475d313f22f92daa8114cbfc555c7189d5844f7b24Dm
f1402f59f4309e9a2ad497a9699c098b61381170de7f600a6a7636db589400d5Dl
155a01df2abb9e5b0463d2bbe0314d3147245d1540cc0e5026de16abc670d0e6Dk
19cc17be5a8b2b11edcbc35b6648252c7d5913d500ab82bda2d44c47f0d3f440
R J R #&AkAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#%AkAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082#$AkAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082##AkAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`aA- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082 "}kJayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a@- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&' is not treated as a special character by the shell.
- Resolves: rhbz#1938082 bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ 9 : ; < ? @# B& C( D+ E/ G1 H4 J8 K; L> NB OF PL QQ RV S[ T_ Ud Vi Wl Xm Yo Zs [v \w ]y ^} _ ` a b
c d e f g h! j& l+ m/ n3 o7 p; q? rC sG tK uO vS wW x[ y_ zc {f |j }n ~r v z } $ ( ) - 2 3 6 7 ; ? A E H L O R V Y \ ` b e h k
d {+{}lAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#*AlAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#)AlAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082({5kAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736{'{}kAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228
d\ #/AlAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`@- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811#.AlAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811[-1lAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811,{5lAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736
;; #3AmAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082{2{}lAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395]15lAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811^07lAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811
\ XX \ [71mAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#19678116{5mAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736{5{}mAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#4AmAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082
X ];5mAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811^:7mAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811#9AmAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`@- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811#8AmAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811
z z ?mSnJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936{>{}nAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395]=5nAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811{<{}mAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
? W: ? WC)nAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936B{;nAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936A{7nAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$@{OnSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873
XX ]G5oAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811 F{GnAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{E{}nAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#DAnAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936
\ K{7oAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$J{OoSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873 ImSoJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936{H{}oAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
] a] ] {O{}oAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#NAoAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WM)oAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936L{;oAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936
[ S{;pAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936R{7pAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$Q{OpSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873 P{GoAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332
W W W{GpAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{V{}pAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#UApAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WT)pAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936
1 $[{OqSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873{Z{}pAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qY]pAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810JXw pJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810
@ D @ #_AqAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936W^)qAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936]{;qAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936\{7qAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936
[ qc]qAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jbw qJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 a{GqAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{`{}qAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332
D D f{;rAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936e{7rAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936{d{}qAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
W W j{GrAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{i{}rAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#hArAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936Wg)rAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936
1 n{ArAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{m{}rAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366ql]rAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jkw rJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810
@ D @ #rAsAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936Wq)sAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936p{;sAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936o{7sAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936
[ qv]sAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Juw sJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 t{GsAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{s{}sAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332
^ Jzw tJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 y{GtAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332 x{AsAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{w{}sAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
}{AtAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{|{}tAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q{]tAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810
D %}~ D {tAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+{]tAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z {{tAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#AtAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V~'tAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
[ {{}uAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q]uAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jw uJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 {GuAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332
, ^ , + {]uAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z
{{uAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422# AuAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V'uAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 {AuAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805
^ v ^ {AvAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{}vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q
]vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810 {uAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422
D %}~ D {vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+{]vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#AvAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V'vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
W ;{}vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$m]vJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
{AwAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{}wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q]wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810
D %}~ D {wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+ {]wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z {{wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#AwAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V'wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
W ; {}wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$ m]wJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
e r+V: e D
e87677e240924426b72cfef3f1ea5a1e88a7a4f5e9fd2f778a2cc3fa1a10069aD
76f4f248ab4aaef273c6428865ba506ee4dcc78c5a1d7c81a8d95a729a9ac4a0D
f7f969b6625cce5d7207b8a291d03841700e7b868361f6f98ce61bb3cc624622D
97eec08dd36b082c41af38fa508339931bbf380795208dfcf82213afc0e5486dD
cb236ed8e588d128b8cdc78afdce6379dcd39b817725c547e7f06734476accd8D
dff37a0add22b38eab5365de428508592ec00dc762e1cb45853495efb7c80c04D~
764c4140bd73b1c0bdc434edd88f8c15595f4b1c04c426277e3e1b098ebe7d16D}
64083e41574124b62214c724c95ecf69227a63f84cb8ea3c1b91c9e46909d214D|
95793f42b845d0ea4f32a235ac9b117b776a44e3f656a26633a3012f93a31bfeD{
f95f722b442bc9d91784e68a17b61860bc39197eaa93b49c63ee4572dd5a1007Dz
46649389b1065af3dd7807f1fef23cb1e6f50351ea151d97424e8b8a75c616f3Dy
8bebe621091a0ae4cea699aab647472b02128fdedc6cd35f7a87166bd62ed233Dx
4c39d29f58affbbc0dca6ea29bd2dd9b75658d24d46f216c7de17b46f021b13e
^ #$AxAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V#'xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 "{AxAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{!{}xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
Q $(m]xJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510'{xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+&{]xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z%{{xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422
;){}xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
g B g V-'yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 ,{AyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{+{}yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366*{5xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
v XY v $2m]yJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#21065101{yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+0{]yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z/{{yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#.AyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531
;3{}yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
Z $6m]zJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#21065105{zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#20734224{5yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
;7{}zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
W 4;czAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731:]zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373R9 zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#21303738{5zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
d \ d ?{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422&>{SzAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>={zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 <9zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
W ;A{}{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$@m]{Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
W 4Ec{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731D]{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373RC {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373B{5{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &H{S{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>G{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 F9{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
W 4Lc|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731K]|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373RJ |Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373I{5|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &O{S|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>N{|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 M9|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }R}|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qQ]|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&PG|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
W 4Vc}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731U]}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373RT }Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373S{5}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &Y{S}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>X{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 W9}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }\}}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q[]}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&ZG}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
* J* >`{~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 _9~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#21303734^c~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731]]~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373
* U* &bG~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&a{S~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
e}~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}d}~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qc]~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
- - 4hcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731g]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373_f{E~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
\ &k{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>j{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 i9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }n}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qm]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&lGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
M t M >q{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695_p{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182o}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111
* U* &sGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&r{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
v}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}u}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qt]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .xWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_w{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
XT >{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695z{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#yAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
* U* &}GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&|{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q~]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
XT q]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
r _{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192
! %! {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#
AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106. WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106
I I ,{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd
mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320' {UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
( XT ( '{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
u _{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182,{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
! %! {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106.WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106
I I , {_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320' {UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
? 8=? y"{yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v!gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C {
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
e r+V: e D
4c86c1c3d77ede8a23e4eef1b4c3e4de9e50b799ed8dc0e6a6091ff032631cf6D
2b98912d64d86fdfe8af76dc95ea23e41332536c8e0ef98223e9a33f2d227f22D
c77e3e9c9f9cc48a40bb188838bad833e1ea361ee0ba3424abed546f3945d701D
e78824bc6d2ccd3f5942b851ce6c3323367ca0cfa615dc8c95158aee19c123feD
d1a6eb397fc04c57428b2ed1f9e3077ed639a5877ef02b2312725fb99c17c807D
30c32ac3292a24f2136302bf5bf2d8ebf572bc2b8c57b4cb3c50ffeb223e144eD
eb01e604d2abe850e31d2092b9db3c5b0df3ee2c53ee80d31ea248c0962ea297D
9b0f357ea1eeba57c0d266260414871735cb04729cc62e43ab7bc3503538cb95D
bce31a77615b379250e7eba11be12018aecf44bf33cd3d92aba684b157074907D
56ec7e50303f9b981bec76c83f17fd6d6eaafaf4b44ba798d7dd4592b9c6663dD
fc6444986c7f47167fd58aa8888952344750766901c89c5c31b69ed13631e92dD
e6d47a4c88646ebb1f6ff54dd92d1dda1c8abb10bc8530e1cfe498c70ff1db87D
226ad3151c609e6c6ae4f2fcadec7bd71f08fdb6c976380ebc8d8c0eac5afbfd
i i .$WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_#{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
( XT ( ''{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229&{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#%AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
u v+gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C*{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642,){_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd (mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
-{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106y,{yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966
I I ,0{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd /mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'.{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
^ 8=? ^ \4}=Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae!@- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaroundy3{yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v2gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C1{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
} 7{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106&6s[Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds~5s Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914
I I ,:{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd Ƃ9mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'8{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
^ 8=? ^ \>}=Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae!@- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaroundy={yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v<gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C;{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
n } n
BSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_A- Update static-libs packaging to new layout
- Resolves: rhbz#1876665PA#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_@- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
- Resolves: rhbz#1876665&@s[Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds~?s Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914
s O s HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665SGs5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_F- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}F{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_E- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zEyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_D- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#18766650DcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_C- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665zCyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_B- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665
/ < / zMyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_B- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665
LSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_A- Update static-libs packaging to new layout
- Resolves: rhbz#1876665PK#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_@- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
- Resolves: rhbz#1876665Jw?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KIw!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
KLt RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665SQs5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_F- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}P{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_E- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zOyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_D- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#18766650NcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_C- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665
: : SWs5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_B- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}V{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_A- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zUyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_@- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665Tw?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KSw!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
}-
[w Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610Zw?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KYw!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665XAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665
| &{ | }`{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_A- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665z_yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_@- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665&^wWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_#- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530]]wESeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275s\iJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609
' (U '
ew Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610dw?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665Kcw!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665bAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665Sas5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_B- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665
{ &{ &hwWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_#- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530]gwESeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275sfiJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609
g g iw3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695
f f k;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pjQAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #oAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#nAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?myAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 l7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
b 0bb {r{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970Iq
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907KpAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
g g sw3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695
f f u;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907ptQAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907 bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ q s v x { } " $ ' + - 0 Á4 ā7 Ł: ǁ> ȁB ɁH ʁM ˁR ́W ́[ ` ρe Ёh сi ҁk Ӂo ԁr Ձs ցu y ف| ځ~ ہ ܁ ݁ ށ ߁ ၨ と" 䁨' 恨+ 灨/ 聨3 遨7 ꁨ; 끨? 쁨C 큨G K O S W [ _ b f j n r v y ~ $ % ) .
/ 2 3
7 ; = A
q #yAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#xAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?wyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 v7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
b 0bb {|{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907KzAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
f f ~;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907p}QAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907? yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
0bb {1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602{{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
f f ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pQAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q # AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907# AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?
yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
0bb {1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602{{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907K
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
+ 9 + }Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a@- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&' is not treated as a special character by the shell.
- Resolves: rhbz#1938082#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527
` X` ` {{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`aA- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082
dXE # AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736
R J R #"AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#!AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082# AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082# AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`aA- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082 }Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a@- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&' is not treated as a special character by the shell.
- Resolves: rhbz#1938082
d {'{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#&AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#%AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082${5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736{#{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228
e r+V: e D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\ #+AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`@- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811#*AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811[)1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811({5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736
;; #/AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082{.{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395]-5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811^,7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811
\ XX \ [31Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#19678112{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736{1{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#0AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082
X ]75Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811^67Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811#5AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`@- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811#4AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811
z z ;mSJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936{:{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395]95Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811{8{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
? W: ? W?)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936>{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936={7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$<{OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873
XX ]C5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811 B{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{A{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#@AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936
\ G{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$F{OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873 EmSJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936{D{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
] a] ] {K{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#JAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WI)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936H{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936
[ O{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936N{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$M{OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873 L{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332
W W S{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{R{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#QAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WP)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936
1 $W{OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873{V{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qU]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810JTw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810
@ D @ #[AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WZ)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936Y{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936X{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936
[ q_]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810J^w Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 ]{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{\{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332
D D b{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936a{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936{`{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
W W f{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{e{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#dAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936Wc)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936
1 j{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{i{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qh]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jgw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810
@ D @ #nAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936Wm)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936l{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936k{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936
[ qr]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jqw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 p{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{o{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332
^ Jvw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 u{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332 t{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{s{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
y{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{x{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qw]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810
D %}~ D ~{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+}{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z|{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531Vz'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
[ {{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810J w Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 {GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332
, ^ , +{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 {AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805
^ v ^ {AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{
{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q ]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422
D %}~ D {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#
AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
W ;{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810
D %}~ D {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
W ; {}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
^ # AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 {AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{ {}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
Q $$m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510#{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+"{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z!{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422
;%{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
g B g V)'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 ({AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{'{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366&{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
e r+V: e D+
f17e881111b5bdf792e8c6c4ebf56c864fe82ead7236e9d1714054bb3577b4c1D*
c538ef407bc0967b16f615b25eb59fae617d84051826819aa6837e85e7ff4db9D)
b153786a744ee0f5ed2df73a98fd3332ceb25e5bd7615afa48574656dfca002fD(
478b6dae53400cf32a4edf127885888456e0d40687b130621abfb48015757969D'
58fb7f4dacffd07cdbe657ec86f4af0d40760828a968dd894a92ea0fc7028255D&
0cb275f3f74903e0b995fb60bd6d2d45b6d75c0f10a329bf957ff43cddf17096D%
28a98571198ec6a28a437669678c624aad4fa1d5a6a2dd1bfb4884dddc584a5cD$
0688bc15522e5a3eee9f6ec2d771f77743a5979f6ac5afa0ec5059daa5926e35D#
bb040f65e782eb45f2e750692dccebe3a40db82890f2982e835b5946fb8a3a13D"
feeaaecf67702b0e5815ef109a94fbdbbce95e0e6228db0f8c286f9f61a845ddD!
9c713d3f8c2da0e96f093a322cd54bca18ff323dd824b4a6cfa730232160f754D
e450e9d5bc1c7f5f5f4f8b5d7ce575e0a5756a4bab5ed98be38ec59c1ffb0276D
529b379f29069f8d8015829e0ce51b950cdfd5764b3d2de634462f2f45957b29
v XY v $.m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510-{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+,{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z+{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#*AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531
;/{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
Z $2m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#21065101{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#20734220{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
;3{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
W 47cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#213037316]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373R5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#21303734{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
d \ d ;{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422&:{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>9{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 89Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
W ;={}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$<m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
W 4AcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731@]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373R? Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373>{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &D{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>C{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 B9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
W 4HcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731G]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373RF Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373E{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &K{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>J{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 I9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }N}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qM]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&LGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
W 4RcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731Q]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373RP Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373O{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &U{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>T{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 S9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }X}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qW]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&VGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
* J* >\{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 [9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#21303734ZcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731Y]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373
* U* &^GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&]{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
a}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}`}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q_]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
- - 4dcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731c]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373_b{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
\ &g{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>f{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 e9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }j}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qi]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&hGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
M t M >m{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695_l{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182k}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111
* U* &oGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&n{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
r}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}q}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qp]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .tWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_s{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
XT >w{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695v{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#uAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
* U* &yGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&x{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
|}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qz]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .~WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_}{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
XT q]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192 {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
r _{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192
! %! {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106.WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106
I I ,
{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd * mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111} }Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q ]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
( XT ( '{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
u _{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182,{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd /mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
! %! {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106.WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106
I I ,{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd 2mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
? 8=? y {yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C {
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
i i . WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_ {EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
( XT ( '#{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229"{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#!AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
u v'gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C&{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642,%{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd 7$mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
){Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106y({yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966
e r+V: e D8
d17d23e9f3e2cd89c98f84ba07345a6c51f1dc3d67f5d52d483e6f2ed2d93751D7
f63528cfd40b5a5fb0d1e92cd4b91403bab6d49b9bd38ad0aef9e293a98a4b2aD6
e1b83152038966e7b6a720ab0871b052fb0dc4df9c843243ac9f34f68ff8a58fD5
74c5d742dbaa75738c5c52f77416c65b88472bdd5eafe0c39fe63d1816522476D4
115dde7a103bd42e620ddd732d36ef609984603c7103f803f2d1d8bac1bef6c9D3
28d98e71d3a3f5bef8abd07f0acc8353279545bf2aee26db49d58baded52104eD2
4c5528d38245aa14b33d05948eb02c322e95528485c9970733d2e5a577774d6dD1
1699532891581ac8f26d0ec07605ccb1d294d5a52f3b72ac2d996d064199d55eD0
3391ca1aa9dc6a5e4ed248a618ad059946ec5c65625f2566cbe9773d60646f54D/
08f9a253bf2654c7f281ec675c59f7bd4bd0f06ed499e82831fcd79aef82e50bD.
4a40dbfa3e0e5c2e7457bda18c82a1c0d3f49f91b8d548c568fea520908bec6bD-
e49bddae5537553d4d5a78524aa8b60eccbdcb546e79e3e046c946ef9da09ef0D,
679e963c7906dde82f6ac27f545036d5c38c79be36b3c643018742f7c21953c3
I I ,,{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd ;+mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'*{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
^ 8=? ^ \0}=Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae!@- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaroundy/{yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v.gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C-{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
} 3{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106&2s[Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds~1s Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914
I I ,6{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd ?5mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'4{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
^ 8=? ^ \:}=Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae!@- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaroundy9{yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v8gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C7{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
n } n
>Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_A- Update static-libs packaging to new layout
- Resolves: rhbz#1876665P=#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_@- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
- Resolves: rhbz#1876665&<s[Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds~;s Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914
s O s DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665SCs5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_F- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}B{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_E- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zAyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_D- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#18766650@cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_C- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665z?yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_B- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665
/ < / zIyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_B- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665
HSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_A- Update static-libs packaging to new layout
- Resolves: rhbz#1876665PG#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_@- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
- Resolves: rhbz#1876665Fw?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KEw!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665 bR }RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ H K N R U X \ ^ a d g j m o r !t "w #y $| %~ & ' ( )
+
, - . 0 1 3 4 5# 6' 8) :, <0 =3 >6 @: A> BD CI EN FS GW H\ Ia Jd Ke Lg Mk Nn Oo Pq Qu Rx Sz T~ U V W X Y Z [ \ ]# ^' _+ a/ b3 c7 d; e? fC gG hK iO jS kW l[ m^ nb of pj qn rr su tz u~ v w x y z { |
KLt NAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665SMs5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_F- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}L{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_E- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zKyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_D- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#18766650JcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_C- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665
: : SSs5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_B- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}R{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_A- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zQyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_@- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665Pw?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KOw!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
}-
Ww Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610Vw?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KUw!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665
| &{ | }\{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_A- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665z[yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_@- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665&ZwWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_#- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530]YwESeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275sXiJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609
' (U '
aw Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610`w?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665K_w!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665S]s5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_B- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665
{ &{ &dwWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_#- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530]cwESeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275sbiJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609
g g ew3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695
f f g;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pfQAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #kAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#jAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?iyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 h7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
b 0bb {n{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970Im
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907KlAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
g g ow3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695
f f q;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907ppQAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #uAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#tAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?syAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 r7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
b 0bb {x{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970Iw
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907KvAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
f f z;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pyQAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #~AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#}AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?|yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 {7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
0bb {1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602{{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
f f ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pQAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
0bb {1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602{ {}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907K Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
+ 9 + }Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a@- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&' is not treated as a special character by the shell.
- Resolves: rhbz#1938082#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527
` X` ` {{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`aA- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082
dXE #AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736
R J R # AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082# AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082# AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`aA- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082 }Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a@- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&' is not treated as a special character by the shell.
- Resolves: rhbz#1938082
d {#{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#"AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#!AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082 {5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736{ {}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228
d\ #'AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`@- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811#&AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811[%1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811${5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736
;; #+AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082{*{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395])5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811^(7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811
e r+V: e DE
a1c2e9d4603673b1df8482afca3dab078eea9124690469ef6dee7f9d4e663b29DD
e9036e2b707bcda2cefdab377479ae65cfc1d4f0da25dc54312d9786b65eb947DC
a11deef2840f7fe80ce1b946609ec3aa04069da0557383edb2dd88107312e356DB
8127547ec74cf787276b994c2f00085304d697481622d6712560f5c1fde57dd1DA
62bf471ba14072212be41f68548e536d8a022b8fffa4c7fdf94b4dc26c4d7d3aD@
cb1e709d6fc4d17df3ff827f54f59d30c0e4cb11b30652b60e0f1087d387bdd9D?
b5bacd96f28f126743bbc0807bcb665ff0c52ee4b0256b7bcffb9a10f8d18c68D>
7bfed40726a8044b0f0685487bd9f5131499f3c91242720ec1c55565601abd18D=
c441b3fe43905a4ba494377fd18f7afb8d59b3c95abfb93384cd0577b3568a5cD<
2117399e425ef95fb4a8b8d38c39a38d73b5e0ad8f8212f6e467901f5f05ca9cD;
31f1aea6422bc6b0072f7c26fc3200a90ac929108eee513f7452415171c8a9bdD:
ceb4699a86911fa2a032df43313a18847098f66921adb5fab1298f3791d1b144D9
4c7a4b1402ce62b471994dd364f3e883167ad5ba8ebba01d67f8ceee2f63d6a5
\ XX \ [/1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811.{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736{-{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#,AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082
X ]35Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811^27Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811#1AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`@- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811#0AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811
z z 7mSJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936{6{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395]55Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811{4{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
? W: ? W;)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936:{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#19999369{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$8{OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873
XX ]?5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811 >{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{={}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#<AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936
\ C{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$B{OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873 AmSJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936{@{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
] a] ] {G{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#FAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WE)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936D{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936
[ K{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936J{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$I{OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873 H{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332
W W O{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{N{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#MAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WL)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936
1 $S{OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873{R{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qQ]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810JPw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810
@ D @ #WAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WV)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936U{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936T{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936
[ q[]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810JZw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 Y{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{X{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332
D D ^{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936]{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936{\{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
W W b{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{a{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#`AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936W_)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936
1 f{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{e{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qd]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jcw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810
@ D @ #jAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936Wi)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936h{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936g{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936
[ qn]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jmw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 l{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{k{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332
^ Jrw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 q{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332 p{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{o{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
u{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{t{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qs]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810
D %}~ D z{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+y{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422zx{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#wAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531Vv'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
[ {~{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q}]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810J|w Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 {{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332
, ^ , +{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 {AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805
^ v ^ {AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422
D %}~ D {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+ {]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z
{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422# AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
W ;{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$
m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810
D %}~ D {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
W ;{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
^ # AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 {AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
Q $ m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510 {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+ {]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z {{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422
;!{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
g B g V%'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 ${AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{#{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366"{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
v XY v $*m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510){Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+({]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z'{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#&AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531
;+{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
Z $.m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510-{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422,{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
e r+V: e DR
6bcf5f3e89c2755d81da6331cde8d0f4c05fcdc2ce0250804be9609d9e125125DQ
483c0e526fee490fe5e387d8f466ba9336f13e99e38a22801656db9f0ef6fdbfDP
89988277f04bdfb0831030270ba38286c5de52d83e5c015250fa99a89d9f5a47DO
8ccfeff30f33569622e94d656bd899c28dec3d943fe48b0140ff2230c98cf112DN
40e235c4553d138143d79a740ff6929dacaa7d0bb99c84caf67b643e58c12a99DM
9c6296e27d68895aa9814be130a3a7bb16cd8fa2ec14d63699d1a6a1223dc662DL
e12fcfca359b3c38140cf59ead8a267ef1c024a4ed16d4250b7d14c94300a665DK
04ec871279754a00e7006a2f023b95ed305dc36a9ff23d65ed20cbf987b07ffdDJ
b9cbd1c4954833f2a8f3d68b1cc92407f3df064e044f0f7f335563bf1983963bDI
f6fbb6525d675cb023750b0e38502f6e9d30cb7ce70f98d75a7bc6a76d175598DH
8e0d749ba5b5f6a9925903f7cb854321aba39a3bc393c295fbbff22c33feb07cDG
7f699df3b1a5a03f46da8dc559615cdabf4c01094c12f89d7bbbbb93f3744af6DF
8244566af4a36c890bd6abe69ab5f9fd27a7847a32c6063c2ec5fb6de40b84fe
;/{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
W 43cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#213037312]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373R1 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#21303730{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
d \ d 7{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422&6{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>5{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 49Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
W ;9{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$8m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
W 4=cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731<]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373R; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373:{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &@{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>?{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 >9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
W 4DcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731C]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373RB Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373A{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &G{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>F{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 E9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }J}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qI]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&HGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
W 4NcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731M]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373RL Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373K{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &Q{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>P{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 O9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }T}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qS]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&RGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
* J* >X{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 W9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#21303734VcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731U]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373
* U* &ZGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&Y{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
]}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}\}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q[]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
- - 4`cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731_]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373_^{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
\ &c{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>b{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 a9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }f}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qe]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&dGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
M t M >i{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695_h{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182g}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111
* U* &kGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&j{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
n}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}m}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192ql]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .pWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_o{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
XT >s{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695r{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#qAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
* U* &uGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&t{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
x}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}w}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qv]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .zWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_y{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
XT q}]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192|{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
r _ {EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}~}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192
! %! {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106.WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106
I I ,{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i . WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_
{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
( XT ( '{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229
{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106# AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
u _{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182,{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
! %! {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106.WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106
I I ,{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
? 8=? y{yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966vgAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642 bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ ~ ! % * + . / 3 7 9 = @ D G J N Q T X Z ] ` c f i k n p s u x z } # % ( , / 2 6 : @ E J O S X ] Á` āa Łc Ɓg ǁj ȁk Ɂm ʁq ˁt ́v ́z ~ ρ Ё с ҁ Ӂ ԁ Ձ ց ׁ# ' ف+ ځ/ ہ3 ݁7 ށ; ߁? C ၮG K のO 䁮S 偮W 恮Z 灮^ 聮b 遮f
i i . WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
( XT ( ' {UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106# AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
u v#gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C"{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642,!{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
%{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106y${yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966
I I ,({_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd 'mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'&{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
^ 8=? ^ \,}=Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae!@- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaroundy+{yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v*gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C){
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
} /{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106&.s[Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds~-s Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914
e r+V: e D_
b346f29da69c21241a449decf0f47b1117502c6f136b70a23a24f1438e919766D^
2596d8e58b7977e350ac45b39a8c22507bf5f23a48e5c5af3025b81016622b58D]
a7cb9faf1648281d26c03a5952b9c015a6e302f5018328fa99f1cd9aafbf89c4D\
935642d829064a30780cd84c8e1ca654486d06cc675f9a06e246d6b366d333c5D[
58b23e3f8226650315902eba6ab9e2d2a81f816aa85d12cebf74af56a8504c16DZ
7efe56d9bcad9ff6dc145a50baf931d2125888da4d984a84fd14a509862f3751DY
4851da54ebe84600b0c7af372a59c38094992018f2ffe45bec040b2dd5d380bdDX
db00d954c05dbf5ebc5e47f7671980d64911b459229bc83c8dcd6c60c4ce0b90DW
d23dd2eb44577c74053a9b0d2df44d8fb4618ffcdc560bc60003b1393107baf1DV
b2017332dfd84aebbbfe8b857c333da3eb192f27956aa48ab410bc0ea011ca72DU
d297c29388bc4f582e226fb85070d6108bb21fb17acb88d7d2de900bfcc84423DT
c6835fc2dc5e5741781c97f0dd76cd871e82a83dded531a6ca44d9a58abd9a2aDS
b1fa6d1fdf39dbf8d3397fcaa156e0402d827e1c451d262b62c3899c837fc47a
I I ,2{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd 1mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'0{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
^ 8=? ^ \6}=Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae!@- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaroundy5{yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v4gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C3{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
n } n
:Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_A- Update static-libs packaging to new layout
- Resolves: rhbz#1876665P9#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_@- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
- Resolves: rhbz#1876665&8s[Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds~7s Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914
s O s @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665S?s5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_F- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}>{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_E- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665z=yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_D- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#18766650<cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_C- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665z;yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_B- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665
/ < / zEyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_B- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665
DSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_A- Update static-libs packaging to new layout
- Resolves: rhbz#1876665PC#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_@- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
- Resolves: rhbz#1876665Bw?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KAw!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
KLt JAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665SIs5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_F- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}H{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_E- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zGyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_D- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#18766650FcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_C- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665
: : SOs5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_B- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}N{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_A- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zMyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_@- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665Lw?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KKw!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
}-
Sw Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610Rw?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KQw!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665
| &{ | }X{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_A- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zWyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_@- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665&VwWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_#- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530]UwESeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275sTiJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609
' (U '
]w Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610\w?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665K[w!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665ZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665SYs5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_B- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665
{ &{ &`wWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_#- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530]_wESeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275s^iJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609
g g aw3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695
f f c;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pbQAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #gAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#fAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?eyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 d7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
b 0bb {j{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970Ii
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907KhAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
g g kw3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695
f f m;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907plQAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #qAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#pAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?oyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 n7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
b 0bb {t{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970Is
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907KrAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
f f v;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907puQAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #zAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#yAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?xyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 w7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
0bb ~{1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602{}{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I|
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907K{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
f f ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pQAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
0bb {1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602{{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
+ 9 + }Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a@- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&' is not treated as a special character by the shell.
- Resolves: rhbz#1938082# AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527
` X` ` {{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082#
AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`aA- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082
dXE #AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736
R J R #AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`aA- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082 }Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a@- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&' is not treated as a special character by the shell.
- Resolves: rhbz#1938082
d { {}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228# AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082# AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082 {5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736{{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228
d\ ##AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`@- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811#"AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811[!1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811 {5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736
;; #'AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082{&{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395]%5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811^$7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811
\ XX \ [+1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811*{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736{){}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#(AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082
X ]/5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811^.7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811#-AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`@- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811#,AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811
z z 3mSJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936{2{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395]15Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811{0{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
e r+V: e Dl
3bf5af40702f37c01b474763465e7acba66d1f9cca53e59538aa92a72f018a35Dk
208f92bb62fd7e69ec6decb3b63b18a2c7e51d8c1ea83099de63b56163c9d1d2Dj
25f4706211e06a217d7143f0aead6ea49f2a47344d314396d09e691a83a51848Di
7d5c7ed2663b8b4d93ccdce3e87fa7b84c42697397d9594170591871b706c60dDh
5ef7809b46025089f784a5c5eef97c5cb1c0ae4576bd7a05f04c657f2231d054Dg
14d75975f6b77789e102a09b3e0c65a16a5cd38e795fdb34c4f40cf970a67b93Df
f1896e8ffe63eff76d82b6ef313c62631fce45258dee3c4ac0e2ffe4b8e841e6De
b82ab048b9697892096528f61737d1713449b0dfdae049f4533ac7d1e469ad0eDd
83d5e8fcf034f22af47eccbbd1c693274a94cfc7afdec007e5cebcb5d3ed2a73Dc
25ac1048044afca67ce7c131d644b1fbf4661666b58a9bf482f289e5b1905c0fDb
12a2e4e010484b9e7bd30fc89af801f0e1e212a2faaaa5017acde6e83cd52964Da
b2ab719c45f136d393fa35fa34b5f7ce41406fba2c86e188fc3d3823aabe7688D`
1cbeca0135b7f2bc07c9bcd75fc0fe3f09797e00adfb9350ced9cd89eeb77a8e
? W: ? W7)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#19999366{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#19999365{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$4{OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873
XX ];5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811 :{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{9{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#8AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936
\ ?{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$>{OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873 =mSJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936{<{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
] a] ] {C{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#BAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WA)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936@{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936
[ G{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936F{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$E{OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873 D{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332
W W K{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{J{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#IAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WH)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936
1 $O{OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873{N{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qM]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810JLw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810
@ D @ #SAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WR)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936Q{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936P{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936
[ qW]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810JVw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 U{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{T{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332
D D Z{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936Y{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936{X{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
W W ^{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{]{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#\AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936W[)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936
1 b{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{a{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q`]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810J_w Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810
@ D @ #fAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936We)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936d{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936c{7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936
[ qj]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jiw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 h{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{g{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332
^ Jnw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 m{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332 l{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{k{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
q{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{p{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qo]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810
D %}~ D v{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+u{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422zt{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#sAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531Vr'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
[ {z{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qy]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jxw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 w{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332
, ^ , +{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z~{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#}AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V|'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 {{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805
^ v ^ {AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810 {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422
D %}~ D {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
W ;
{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$ m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
{AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{ {}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q ]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810
D %}~ D {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
W ;{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
^ #AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 {AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
Q $ m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422
; {}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
g B g V!'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 {AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{ {}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366 {5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
v XY v $&m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510%{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+${]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z#{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#"AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531
;'{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
Z $*m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510){Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422({5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
;+{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
W 4/cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731.]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373R- Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373,{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
d \ d 3{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422&2{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>1{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 09Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
e r+V: e Dy
447bf3552c5156b143306396c3569328e80baec97cb1a11315280cd2f3b38e0eDx
dc71096c57fc06718137b2f317d123ac81f3c58557e1d9e42b1d0cceaeb95d38Dw
f8d95a99893e9265f3f6125f684c56c23afa3834653a04d0e9dbe9360a6aaf5dDv
9a2538ebee1a09c61de1b04f3ce4e0727b75e499fc1cbe6df0a72d5507871c0eDu
639be57d983a29004b74a7f3b753de3e62c2aca8e576d15d3d5b4ca2b847507aDt
48b28be8658e81953a40daf5ae041fd07fe585facbf0a5c985d98cee88b3f0aaDs
0dfc6e8ea7cfb111b83da1e6ce7bfc3f5f3c353f61b25a21812ba01aed81cbedDr
981af71f35ff127f9a818e70105e8d4597de1eae244d22caa97ea246a29deee1Dq
0a8fa0a8748dd4667a74653e840521e8d0602e1f9210bb2b27d75c59318081c0Dp
dc7ff660e8cb322dcf0a071b2f556dfa57cc7a3c0a543524ae2c9b6a807d8262Do
248b6271c4100aa6ae97c9a74a7d3b0bf217ed7e074e51ff84d4eb50183ea9a5Dn
503b6775fa6993e20617e140090892909b171ba5cb9cf102f14e12e8e3722fbfDm
993ebb29f0261ce55c92629ffd652f5fd4b867dbb41765fad94a00716ec5e8b1
W ;5{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$4m]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
W 49cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#213037318]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373R7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#21303736{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &<{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>;{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 :9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
W 4@cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731?]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373R> Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373={5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &C{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>B{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 A9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }F}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qE]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&DGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
W 4JcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731I]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373RH Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373G{5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &M{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>L{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 K9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }P}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qO]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&NGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
* J* >T{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 S9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#21303734RcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731Q]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373
* U* &VGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&U{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
Y}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}X}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qW]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
- - 4\cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731[]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373_Z{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
\ &_{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>^{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 ]9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }b}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qa]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&`GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
M t M >e{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695_d{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182c}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111
* U* &gGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&f{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
j}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}i}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qh]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .lWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_k{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
XT >o{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695n{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#mAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
* U* &qGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&p{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
t}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}s}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qr]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192 bR VRY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ 끮n 쁮q 큮v z
! & ' * + / 3 5 9 < @ C F J M P
T V Y
\ _ b e g j l o q t v y |
!
# $ & ' ( ) +! ,$ .( /+ 0. 22 36 5< 6A 7F 8K 9O :T ;Y <\ =] >_ ?c @f Ag Bi Cm Dp Er Fv Gz H| I J K L
M N O P Q# R' S+ T/ U3
i i .vWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_u{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
XT qy]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192x{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#wAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
r _|{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}z}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192
! %! {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#~AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106.}WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106
I I ,{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320' {UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
( XT ( '
{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
u _
{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182, {_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd " mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
! %! {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106.WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106
I I ,{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd %mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
? 8=? y{yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966vgAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
i i .WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_{EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
( XT ( '{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
u v gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C {
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642, {_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd * mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
!{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106y {yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966
I I ,${_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd -#mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'"{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
^ 8=? ^ \(}=Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae!@- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaroundy'{yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v&gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C%{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
} +{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106&*s[Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds~)s Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914
I I ,.{_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd 1-mAJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320',{UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
^ 8=? ^ \2}=Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae!@- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaroundy1{yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v0gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C/{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
n } n
6Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_A- Update static-libs packaging to new layout
- Resolves: rhbz#1876665P5#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_@- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
- Resolves: rhbz#1876665&4s[Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds~3s Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914
e r+V: e D
6e91279c2c56161f7ffdfd5a8f8f361d282238b249859e57ac7e8d4b04a799e7D
c55fbad2b511346ebf2a848c75861a87c98b38738226ac74429144324281ef52D
f544bc64d6a690d2e5853b042cb5a8c7eb50879dacd1acf3c3eca69966d25370D
0cb228d7dc8544ea720f5503724f929baf79d69d2a7d1eb9dd47cf361620788eD
be2825be40e44e47e533b1d6e13b3145e41e073086a22147b77532548436e30dD
03861872c0b045970aa5d709fc96b48dc78114b5fe454d59dff316eb4753ec08D
fed1a25dff437173e5198969384d287e1c91872362d72445cda5bf8bc78201f5D
0bec8227df4692ec640eaf96154a87faa5a1ab3d9c37856f4f8e0c0a98c88525D~
8c2a340bb8e3487639e7851ddf9b80b263ca137dee7948eceddfd372f4b80882D}
6f89875815ef474fc2dd49d33fb56f30d070a424491a2ab970b04c4b3a36133eD|
8b27ff2d6ae464c9929368b71564984ac614007abaed4abfb490c301cdd341deD{
c43cc5c86cdd41a4e686f3173df2eca34068dc56d75a5a468786fc13989bd5fdDz
d5660d632b89221fe127f4475df5c34071486cde5540e458836be4a6b5ab6bcd
s O s <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665S;s5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_F- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}:{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_E- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665z9yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_D- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#187666508cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_C- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665z7yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_B- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665
/ < / zAyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_B- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665
@Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_A- Update static-libs packaging to new layout
- Resolves: rhbz#1876665P?#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_@- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
- Resolves: rhbz#1876665>w?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665K=w!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
KLt FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665SEs5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_F- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}D{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_E- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zCyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_D- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#18766650BcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_C- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665
: : SKs5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_B- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}J{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_A- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zIyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_@- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665Hw?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KGw!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
}-
Ow Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610Nw?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KMw!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665LAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665
| &{ | }T{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_A- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zSyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_@- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665&RwWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_#- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530]QwESeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275sPiJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609
' (U '
Yw Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610Xw?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KWw!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665SUs5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_B- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665
{ &{ &\wWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_#- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530][wESeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275sZiJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609
g g ]w3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695
f f _;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907p^QAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #cAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#bAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?ayAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 `7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
b 0bb {f{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970Ie
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907KdAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
g g gw3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695
f f i;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907phQAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #mAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#lAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?kyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 j7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
b 0bb {p{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970Io
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907KnAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
f f r; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pqQ Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #vA Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#uA Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?ty Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 s7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
0bb z{1 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602{y{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970Ix
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907Kw Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
f f |; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907p{Q Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q # A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?~y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 }7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
0bb {1 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602{{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907K Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
+ 9 + } Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a@- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&' is not treated as a special character by the shell.
- Resolves: rhbz#1938082#A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527
` X` ` {
{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228# A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082# A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082#
A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082# A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`aA- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082
dXE #A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527{5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736
R J R #A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082#A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082#A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`aA- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082 } Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a@- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&' is not treated as a special character by the shell.
- Resolves: rhbz#1938082
d {{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082{5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736{{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228
d\ # A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`@- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811# A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811[ 1 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811 {5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736
;; ##A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082{"{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395]!5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811^ 7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811
\ XX \ ['1 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811&{5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736{%{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#$A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082
X ]+5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811^*7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811#)A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`@- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811#(A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811
z z /mS Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936{.{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395]-5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811{,{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
? W: ? W3) Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#19999362{; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#19999361{7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$0{O Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873
XX ]75 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811 6{G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{5{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#4A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936
e r+V: e D
4b6626a337fe2141755d1e57f9afb5d1914f4b0d752fac9cb28cea90640d95d3D
e76b18f34fbbf2a1e7810ed95efd446420bc4ee561f16434445b97b5a0d466c4D
2b55d4f35dce819b798ee136c0dfb0c453985cfd824a8e839552fa2112ae4123D
649c2ee77e6ebe7b0ada06b4afab6acc21bb572fecb9b419d681640d40847bf0D
6cd18c7d7a47f7f1e42e63865172f463162be9c7697c5e7b1953c41099a4d25dD
39b2ee3cdead3a8fa94b2f7fb082014e56dc28992ac2740a46795004ac7dd6c0D
7541eb5333c72fe17aa8e0d7dc2f7f91d8769a57129608043af2b098b5741661D
20e9c59ba021cc9600dbade71b83e1e1b014eae44d6ba273d5fa6491d9508f08D
e3d2e4fe4672614c07f199cf8ea78ca12ec2e4c5bfee735cbffb6dca84ba91cdD
e2d9e1fc46982332f4c50e35b6e51f62edc6bd78156642b63e2553d404909efaD
47005db64df1a2026edd49418e5714bd0cc4b55a22af61ad08162f38d849be23D
a2a0890a1bee535a6e50b46532778911b437fe971d72e228048964d8dd0f7550D
8b331529abc56930e532f91b8634eaa719301817f62a7a7fbbc720594baf85da
\ ;{7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$:{O Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873 9mS Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936{8{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
] a] ] {?{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#>A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936W=) Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936<{; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936
[ C{; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936B{7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$A{O Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873 @{G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332
W W G{G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{F{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#EA Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WD) Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936
1 $K{O Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873{J{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qI] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810JHw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810
@ D @ #OA Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WN) Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936M{; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936L{7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936
[ qS] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810JRw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 Q{G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{P{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332
D D V{;
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936U{7
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936{T{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
W W Z{G
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{Y{}
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#XA
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WW)
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936
1 ^{A
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{]{}
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q\]
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810J[w
Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810
@ D @ #bA Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936Wa) Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936`{; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936_{7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936
[ qf] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jew Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 d{G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{c{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332
^ Jjw Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 i{G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332 h{A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{g{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
m{A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{l{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qk] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810
D %}~ D r{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+q{] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422zp{{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#oA Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531Vn' Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
[ {v{}
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qu]
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jtw
Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 s{G
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332
, ^ , +{{]
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422zz{{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#yA
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531Vx'
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 w{A
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805
^ v ^ {A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{~{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q}] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810|{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422
D %}~ D { Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+{] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V ' Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
W ;{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$m] Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
{A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810
D %}~ D { Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+
{] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z {{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422# A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V
' Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
W ;{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$m] Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
^ #A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V' Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 {A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
Q $m] Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+{] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422
;{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
g B g V ' Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 {A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366{5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
v XY v $"m] Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510!{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+ {] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z {{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422# A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531
;#{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
Z $&m] Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510%{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422${5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
;'{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
W 4+c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731*] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373R) Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373({5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
d \ d /{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422&.{S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>-{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 ,9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
W ;1{} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$0m] Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
W 45c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#213037314] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373R3 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#21303732{5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &8{S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>7{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 69 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
e r+V: e D
f251e57808a6960518cf05f98f4bed5c0b006b5a01550a68ebb9141c79f0a2ddD
fb53f898a944ec236a811663325ceef801af9d4d3e2c11522ee1bd7a77d9da79D
35254d0cedc9b7756462a8c23a1b9bbf476fefd2ec13b879640bcc09a53504b6D
5a103d4f3b121195638cf61cb91fbc034b9c2a6deee845296612dfb590ef0859D
dab70d9c3e9d60e9a4331d2ccb0d2d3dacfe1d41e355572961045f2ce2c22a34D
e5bf29d89efc9dcdf73e8e8b84b8aa41793d043e3bf944a0c3659d666a13bb4bD
2f740a705cf289cc730913827ebc04cd2b4e26e229696914ddce3e48bfee0552D
2095e4e98eb5962eb97eb3c3165dd036bf0cc42fbb1cfd2c138811047868000fD
f1844144d5a3c42025f3ef1788373858de7187d6dd96e9bcddac4b3fd027e5c9D
8477e56cf835d806a8f5345ebff218dfbceb351c7bca81b9aa806a2fa8930f02D
ce32d3269966c385c52153f1c95ee8578b768a8b69a1d2937f50ab40dc45e380D
a051479c689a04906459e0f87104834ea707b2ffeb1317695704b03edb4c8b2bD
47a66548a049d52ad8e7adcde0de98e6768596cb771d5b8ee590193dda421dd4
W 4<c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731;] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373R: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#21303739{5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &?{S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>>{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 =9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }B} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qA] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&@G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
W 4Fc Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731E] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373RD Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373C{5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &I{S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>H{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 G9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }L} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qK] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&JG Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
* J* >P{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 O9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#21303734Nc Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731M] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373 bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ X; Y? ZC [G \K ]O ^S _V `Z a^ bb cf dj em fr gv h{ i j k l m n o p q r s" t# u& v' w+ x/ y1 z5 {8 }< ~? B F I L P R U X [ ^ a c f h k m p r u x { ~ $ ' * . 2 8 = B G K P U X Y [ _ b c e i l n r v x |
* U* &RG Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&Q{S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
U} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}T} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qS] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
- - 4Xc Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731W] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373_V{E Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
\ &[{S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>Z{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 Y9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }^} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q]] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&\G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
M t M >a{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695_`{E Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182_} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111
* U* &cG Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&b{S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
f} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}e} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qd] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .hW Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_g{E Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
XT >k{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695j{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#iA Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
* U* &mG Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&l{S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
p} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}o} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qn] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .rW Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_q{E Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
XT qu] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192t{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#sA Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
r _x{E Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182w} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}v} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192
! %! {{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#zA Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106.yW Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106
I I ,~{_ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd }mA Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'|{U Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111} } Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .W Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_{E Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
( XT ( '{U Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
u _ {E Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182,{_ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd mA Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
! %! { Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106# A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106.
W Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106
I I ,{_ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd mA Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'
{U Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
? 8=? y{y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966vg Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
i i .W Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_{E Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
( XT ( '{U Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
u vg Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642,{_ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd mA Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106y {y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966
I I , {_ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd mA Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320' {U Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
^ 8=? ^ \$}= Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae!@- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaroundy#{y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v"g Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C!{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
} '{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106&&s[ Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds~%s Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914
I I ,*{_ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd )mA Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'({U Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
^ 8=? ^ \.}= Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae!@- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaroundy-{y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v,g Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C+{
Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
n } n
2 Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_A- Update static-libs packaging to new layout
- Resolves: rhbz#1876665P1# Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_@- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
- Resolves: rhbz#1876665&0s[ Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds~/s Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914
s O s 8 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665S7s5 Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_F- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}6{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_E- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665z5y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_D- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#187666504c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_C- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665z3y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_B- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665
/ < / z=y !Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_B- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665
< !Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_A- Update static-libs packaging to new layout
- Resolves: rhbz#1876665P;# !Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_@- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
- Resolves: rhbz#1876665:w? Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665K9w! Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
e r+V: e D-
7a01c8e4b4c1eaaf03f29bc31b1fe91b81c17591f2d6a358c7e57ae3b8103eb6D,
c0938d8860cf5e93761458738a21c3f5f505e71d1669169693c88f8471d51381D+
8319e904c4b86f6892579492778456a31dcdbb29d4f7b62060dba26486be2a85D*
8f21403b3615c8a3c67833bcb49d11b4c3b80d768a6bdba42abe5d2b299d9cb3D)
b22aa8999bea98b78e5fb8b2195a94bb82daa9f6c9469ec768b019d741e439dbD(
9592f2b746e7ef4c2e4fd13ac3fad913504fb720911df981e24b63bf2011a6e6D'
01b83fa31f2e2ed972aa491423479df2e3e026e54668e3933d3b8b1803fe208bD&
50a577d62eed91a0ed5c686f85830b3c9252dff331c94841f673d8f19924250dD%
2cee495ddd05e0808ca1e516d0b1ad02fcdf3e46ede1dadb81a285b96ab3648cD$
393806557640081ee6c9dd7dc6ee00e307d9ae676a1a267d20fb4793dda538d7D#
ba6f42672b28ba6a322e4daf6a3e3fc791a39cdd7e438b6d6954713e77022fa6D"
b9b371aa85a094ef9bf89ccec7f948b0f98488eac855ba41f5653f61941610e4D!
5c5cbbb79d474d8a08d41a7a9eab16454a6204f748c42ff97d2ca8776ea1fbc8
KLt B !Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665SAs5 !Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_F- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}@{ !Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_E- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665z?y !Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_D- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#18766650>c !Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_C- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665
: : SGs5 "Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_B- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}F{ "Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_A- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zEy "Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_@- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665Dw? !Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KCw! !Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
}-
Kw "Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610Jw? "Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KIw! "Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665H "Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665
| &{ | }P{ #Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_A- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zOy #Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_@- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665&NwW "Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_#- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530]MwE "Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275sLi "Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609
' (U '
Uw #Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610Tw? #Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KSw! #Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665R #Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665SQs5 #Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_B- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665
{ &{ &XwW #Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_#- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530]WwE #Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275sVi #Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609
g g Yw3 $Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695
f f [; $Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pZQ $Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #_A $Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#^A $Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?]y $Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 \7 $Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
b 0bb {b{} $Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970Ia
$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907K` $Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
g g cw3 %Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695
f f e; %Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pdQ %Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #iA %Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#hA %Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?gy %Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 f7 %Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
b 0bb {l{} %Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970Ik
%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907Kj %Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
f f n; &Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pmQ &Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #rA &Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#qA &Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?py &Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 o7 &Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
0bb v{1 &Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602{u{} &Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970It
&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907Ks &Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
f f x; 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_@- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907pwQ 'Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 & JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907
q #|A 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907#{A 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_A- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907?zy 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907 y7 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_=- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907
0bb {1 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602{{} 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970I~
'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907K} 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907
+ 9 + } (Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a@- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&' is not treated as a special character by the shell.
- Resolves: rhbz#1938082#A (Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082 (Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527 (Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527
` X` ` { {} (Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#A (Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#A (Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082#A (Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082#A (Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`aA- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082
dXE #
A )Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082 )Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527 )Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527
{5 (Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736
R J R #A )Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#A )Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082#A )Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082#A )Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`aA- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082 } )Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a@- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&' is not treated as a special character by the shell.
- Resolves: rhbz#1938082
d {{} *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228#A *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082#A *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082{5 )Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736{{} )Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228
d\ #A *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`@- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811#A *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811[1 *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811{5 *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736
;; # A +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082{ {} *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395] 5 *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811^ 7 *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811
\ XX \ [#1 +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811"{5 +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736{!{} +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228# A +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082
X ]'5 +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811^&7 +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811#%A +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`@- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811#$A +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811
z z +mS ,Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936{*{} ,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395])5 ,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811{({} +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
? W: ? W/) ,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936.{; ,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936-{7 ,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$,{O ,Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873
XX ]35 -Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811 2{G ,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{1{} ,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#0A ,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936
\ 7{7 -Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$6{O -Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873 5mS -Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936{4{} -Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`@- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395
] a] ] {;{} -Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#:A -Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936W9) -Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#19999368{; -Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936
[ ?{; .Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936>{7 .Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936$={O .Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873 <{G -Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332
e r+V: e D:
e1f96091d25298a2ba6942bf99057752361acd85a35af09192241146d47a7a08D9
48de10d35c7c78cda02151a71c35178d70d58dce2c1dc876ddabcacf02451fd3D8
d042e5b60af5791405d9b06cced6de982519177eed1cee3e7edb8c9002315ac6D7
724f57980c52e692722c8586a68fbb7ecfc81812bf1d923a920abbdb04014943D6
40085a6aba324cf85849d9d215ea0210e30299d2952b61e18b07e9bbd0256068D5
9dc6103c894580255acdaca6f10c631843d1f93573f2546118ae35826f597314D4
2128f5867b50e91bf6e0f43a02f4d16b03085189d8040f386c115ab75f5a842bD3
2ebb08ac7cb76c373713ca2bd23cc2232982bc402088afaa3c55fff250bb8869D2
33d81cf734e717eea6795c7c41a630b5e0eecbab4514f5859db6609e50ef0447D1
6b0e694fe0bd25769497d03ebe96ad15e93d707736bcee6eb8e89bae4d0f77c1D0
e0d5c3c3503d52c16cbaa1ee54130af69d4b939561a49a2a1591e2049fd69279D/
740cebdde7c6823d4f1beee23080215f1f12ef9577011c88461d3bf597d1931aD.
bf23abfbb52f27d2a18450e2bbc48bb65f02cee123b849b8e4fb9c07a0e91259
W W C{G .Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{B{} .Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#AA .Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936W@) .Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936
1 $G{O /Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873{F{} .Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qE] .Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810JDw .Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810
@ D @ #KA /Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WJ) /Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936I{; /Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936H{7 /Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936
[ qO] /Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810JNw /Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 M{G /Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{L{} /Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332
D D R{; 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936Q{7 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936{P{} /Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
W W V{G 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{U{} 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332#TA 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936WS) 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936
1 Z{A 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{Y{} 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qX] 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810JWw 0Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810
@ D @ #^A 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936W]) 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936\{; 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936[{7 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936
[ qb] 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jaw 1Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 `{G 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1afA- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332{_{} 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332
^ Jfw 2Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 e{G 2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332 d{A 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{c{} 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
i{A 2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{h{} 2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qg] 2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810
D %}~ D n{ 2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+m{] 2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422zl{{ 2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#kA 2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531Vj' 2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
[ {r{} 3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qq] 3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810Jpw 3Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaac- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810 o{G 3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af@- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332
, ^ , +w{] 3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422zv{{ 3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#uA 3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531Vt' 3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 s{A 3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805
^ v ^ {{A 4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{z{} 4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366qy] 4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810x{ 3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422
D %}~ D { 4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+{] 4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z~{{ 4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#}A 4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V|' 4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
W ;{} 4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$m] 4Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
{A 5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{} 5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366q] 5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaae- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810
D %}~ D
{ 5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+ {] 5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{ 5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#A 5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V' 5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531
W ; {} 5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$ m] 5Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
^ #A 6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531V' 6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 {A 6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{
{} 6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366
Q $m] 6Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510{ 6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+{] 6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{ 6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422
;{} 6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
g B g V' 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531 {A 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805{{} 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1aZ@- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366{5 6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
v XY v $ m] 7Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510 { 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422+ {] 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422z{{ 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV@- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422#A 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531
; {} 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510
Z $"m] 8Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510!{ 8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422 {5 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
;#{} 8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510 bR 0RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ ā Ł Ɓ
ǁ ȁ Ɂ ʁ ˁ# ́' ́+ / ρ3 Ё7 с; ҁ? ԁC ՁG ցK ׁO R فV ځZ ہ^ ܁b ݁f ށi ߁n r ၴw ⁴{ ふ 䁵 偵 恵
灵 聵 遵 ꁵ 끵 쁵 큵 " # ' + - 1 4 8 ; > B E H L N Q T W Z ] _ b d g i l
n q t
w z } !# "& $* %. &4 '9 (> )C +G ,L -Q .V /]
W 4'c 8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731&] 8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373R% 8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373${5 8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
d \ d +{ 9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422&*{S 8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>){ 8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 (9 8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
W ;-{} 9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version & release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510$,m] 9Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b@- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510
W 41c 9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#213037310] 9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373R/ 9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373.{5 9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &4{S 9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>3{ 9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 29 9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
W 48c :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#213037317] :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373R6 :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#21303735{5 :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &;{S :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>:{ :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 99 :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }>} :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q=] :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&<G :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
e r+V: e DG
ec4e31145b2bd5c37f07b12786ef3f1a7f747d2b7545a8f2deb7ca4a1dee6692DF
374186860ba10d433ef1b2fc521d6b97c48570d7340740cbe2e83f73df0b05e4DE
a4b82389944cd83f755da0bd6b1b81d987f9dc5f28ee78bd23bde637a51321e2DD
ab078229f1b5a4b3faba2b28785c5ddc0ff1118b1a2b3480dd2d824f7201a9ceDC
1b6f592d463f10e592cc2b035e409be816bd6dc189d7457574d5641fdcf767bcDB
22b2f7582ba663c4bb9f008bce4f7a80e69654b30b05c0571864b3b8292f8ff5DA
dcd5ebbf96fa4b554ad2a5520ab76814b9eae044e649c9408139b2b07795d5f4D@
1bb75937417ce4c985d73d9cf214bfece58dd2abdf6c21d4b1cb0108f070e2ffD?
be203dd4714182fcfeef395bb57d7d5e9f418c603b87d6a5eb1ddb4db5253163D>
2141ba5b56fde898fffe70f5ebc0e8dd7ef3958b68e0cb81881c570fbfc2a0f2D=
8c2b3aa763d6d464e67be783b62d083cadc0aa9caf7fd24997ebcb514c44a4b2D<
b322d84f1b35af3ca899bf943ee67782b8ae449a4769e0b3d0b7f455085b669cD;
6f4bf52463b1c528e35abf3e53489d86f0214da06151240744c0ab18b50ab903
W 4Bc ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731A] ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373R@ ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373?{5 ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512
\ &E{S ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>D{ ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 C9 ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }H} ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qG] ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&FG ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
* J* >L{ <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 K9 <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#21303734Jc <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731I] <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373
* U* &NG <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&M{S <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
Q} <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}P} <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qO] <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
- - 4Tc =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
- Related: rhbz#21303731S] =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373_R{E <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
\ &W{S =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695>V{ =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695 U9 =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373
] _ ] }Z} =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qY] =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192&XG =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
M t M >]{ >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695_\{E =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182[} =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111
* U* &_G >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&^{S >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
b} >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}a} >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q`] >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .dW >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_c{E >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
XT >g{ ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF@- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695f{ >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#eA >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
* U* &iG ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac @- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192&h{S ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695
l} ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}k} ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192qj] ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .nW ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_m{E ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
XT qq] @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192p{ ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#oA ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
r _t{E @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182s} @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}r} @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192
! %! w{ @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#vA @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106.uW @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106
I I ,z{_ @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd ymA @Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'x{U @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
}} AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2cG- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111}|} AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192q{] AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
i i .W AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_~{E AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
( XT ( '{U AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229{ AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106# A AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
u _{E BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182,{_ AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd mA AJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
! %! { BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#A BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106.W BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106
I I , {_ BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd
mA BJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320' {U BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
? 8=? y{y BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v
g BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C {
BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
i i .W CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106_{E CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
( XT ( '{U CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229{ CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106#A CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.eadD@- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
u vg CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C{
CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642,{_ CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd mA CJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
{ DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106y{y CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966
I I , {_ DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd mA DJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'{U DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
^ 8=? ^ \ }= DAnton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae!@- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaroundy {y DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v g DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C {
DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
} #{ EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106&"s[ DAnton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds~!s DAnton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914
I I ,&{_ EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA)
- Upd #%mA EJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320'${U EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d@- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229 ate release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
^ 8=? ^ \*}= EAnton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae!@- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaroundy){y EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966v(g EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031C'{
EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
n } n
. FSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_A- Update static-libs packaging to new layout
- Resolves: rhbz#1876665P-# FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_@- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
- Resolves: rhbz#1876665&,s[ EAnton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds~+s EAnton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914
s O s 4 FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665S3s5 FJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_F- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}2{ FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_E- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665z1y FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_D- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#187666500c FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_C- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665z/y FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_B- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665
/ < / z9y GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_B- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665
8 GSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_A- Update static-libs packaging to new layout
- Resolves: rhbz#1876665P7# GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_@- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
- Resolves: rhbz#18766656w? FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665K5w! FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
KLt > GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665S=s5 GJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_F- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}<{ GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_E- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665z;y GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_D- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#18766650:c GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_C- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665
: : SCs5 HJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_B- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665}B{ HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_A- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zAy HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_@- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665@w? GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665K?w! GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665
e r+V: e DT
dd1acce44324d0f78c3fefe9d62e4f6b967b6a1f192ce18c8c0336a4c8adabd0DS
d837edc3c03b3b3e816e3578cfb0fb39a5018c0d8b79486829a91303a31fba95DR
4159fb078456195a5426e0c1b4c344097b8cea15b93d89a5b0edec624c3dfabaDQ
81fe53c540c2219cdfff5019d61db2306219389015797fa7f76cb1b9d772482aDP
a1ca7e4977e1aa55e582537db75040c395105cb35ed1d15da80d8a11e4a3f662DO
52427e37a69f9019c71338e82cb47b4093f49f6cbe7aaf6c7472b6ece216b3bdDN
da6113b8e3f60613882eeec8c8497c068bd46559042351e5cf030ec9ad382d41DM
d6beb9da905c4b24c2f8e52152046e20369cddd4a1f98e7babf6ac1658ced21bDL
ac4c10593aace7feb58b42351306016a0668d518b590587b3be6a1fabb94aabfDK
1aed659e1e3bce0de9d3874074bcf4fc4df05a8018e054fdb5ac7209dd8ffad7DJ
e95162c5ce19bdda8897921e19c340bcc15ab18c2627b6d8915c79b8754c1505DI
e601bbdfd361d5089be7cec55d69d6cc4b85d1c52963c2f8d004de14bd0ccde1DH
1ede1f94ef149ac05c9b87696792135237e12c4f7eb09ed33fcb232bee567817
}-
Gw HSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610Fw? HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KEw! HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665D HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665
| &{ | }L{ IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_A- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665zKy IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_@- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665&JwW HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_#- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530]IwE HSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275sHi HJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609
' (U '
Qw ISeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610Pw? IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665KOw! IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_9- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665N IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_9- Improve quoting of vendor name
- Resolves: rhbz#1876665SMs5 IJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_B- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665
b &{ b $VqY JVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8R@- Fix vlock doesn't perform PAM account management or credential reinitialization
Resolves: #1032140lUqk JVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-7Rz/@- Add PAM config for vlock
Resolves: #1026819&TwW IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_#- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530]SwE ISeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275sRi IJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609
P ]J P ]s5 JVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-15[qr- Add man page for kbdinfo, link open man page to openvt man page
Related: #949015^\sK JVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-14[(@- Replace CtrlL_Lock with Caps_Lock in generated us.map
Resolves: #1441411
- Improve man pages and usage messages quality and consistency
Resolves: #949015{[s JVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-13X@- Add compose rules to generated cz.map
Resolves: #1181581nZsm JVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-12W - Add eurlatgr console font
Resolves: #1310286 YsG JVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-11T$- Include xkb layouts from xkeyboard-config converted to console keymaps
Resolves: #1122058NXa? JDaniel Mach <dmach@redhat.com> - 1.15.5-10RU- Mass rebuild 2014-01-24MW_? JDaniel Mach <dmach@redhat.com> - 1.15.5-9Rk- Mass rebuild 2013-12-27
" p W " {es KVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-13X@- Add compose rules to generated cz.map
Resolves: #1181581ndsm KVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-12W - Add eurlatgr console font
Resolves: #1310286 csG KVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-11T$- Include xkb layouts from xkeyboard-config converted to console keymaps
Resolves: #1122058Nba? KDaniel Mach <dmach@redhat.com> - 1.15.5-10RU- Mass rebuild 2014-01-24Ma_? KDaniel Mach <dmach@redhat.com> - 1.15.5-9Rk- Mass rebuild 2013-12-27$`qY KVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8R@- Fix vlock doesn't perform PAM account management or credential reinitialization
Resolves: #1032140l_qk KVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-7Rz/@- Add PAM config for vlock
Resolves: #1026819 ^s% JVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-16aw- Fix vlock when console or terminal is closed abruptly
Resolves: #1486233
9 9 Nla? LDaniel Mach <dmach@redhat.com> - 1.15.5-10RU- Mass rebuild 2014-01-24Mk_? LDaniel Mach <dmach@redhat.com> - 1.15.5-9Rk- Mass rebuild 2013-12-27$jqY LVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8R@- Fix vlock doesn't perform PAM account management or credential reinitialization
Resolves: #1032140liqk LVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-7Rz/@- Add PAM config for vlock
Resolves: #1026819 hs% KVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-16aw- Fix vlock when console or terminal is closed abruptly
Resolves: #1486233gs5 KVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-15[qr- Add man page for kbdinfo, link open man page to openvt man page
Related: #949015^fsK KVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-14[(@- Replace CtrlL_Lock with Caps_Lock in generated us.map
Resolves: #1441411
- Improve man pages and usage messages quality and consistency
Resolves: #949015
c _n c rs% LVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-16aw- Fix vlock when console or terminal is closed abruptly
Resolves: #1486233qs5 LVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-15[qr- Add man page for kbdinfo, link open man page to openvt man page
Related: #949015^psK LVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-14[(@- Replace CtrlL_Lock with Caps_Lock in generated us.map
Resolves: #1441411
- Improve man pages and usage messages quality and consistency
Resolves: #949015{os LVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-13X@- Add compose rules to generated cz.map
Resolves: #1181581nnsm LVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-12W - Add eurlatgr console font
Resolves: #1310286 msG LVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-11T$- Include xkb layouts from xkeyboard-config converted to console keymaps
Resolves: #1122058
/ &V / xiO MJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560wi MJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560Kvi/ MJan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441ugA MJan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002[tgQ MJan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603^sgY MJan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129
NU: ^}gY NJan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129|i MJan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159{i5 MJan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401tzi MJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048-yis MJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762
1 iO NJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560i NJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560K i/ NJan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441gA NJan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002[~gQ NJan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603
NU: ^gY OJan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129i NJan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159i5 NJan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401ti NJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048-is NJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762
1 iO OJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560 i OJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560K
i/ OJan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441 gA OJan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002[gQ OJan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603
NU: ^gY PJan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129i OJan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159i5 OJan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401ti OJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048-
is OJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762
1 iO PJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560i PJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560Ki/ PJan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441gA PJan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002[gQ PJan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603
NU: ^gY QJan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129i PJan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159i5 PJan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401ti PJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048-is PJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762
1 iO QJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560 i QJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560K i/ QJan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441 gA QJan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002[ gQ QJan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603
NU: ^%gY RJan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129$i QJan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159#i5 QJan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401t"i QJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048-!is QJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762
1 *iO RJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560)i RJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560K(i/ RJan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441'gA RJan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002[&gQ RJan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603
NU: ^/gY SJan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129.i RJan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159-i5 RJan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401t,i RJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048-+is RJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762
1 4iO SJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#13425603i SJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560K2i/ SJan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#13334411gA SJan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002[0gQ SJan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603
NU: ^9gY TJan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#12601298i SJan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#18561597i5 SJan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401t6i SJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048-5is SJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762
1 >iO TJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560=i TJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560K<i/ TJan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441;gA TJan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002[:gQ TJan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603
NU: ^CgY UJan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129Bi TJan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159Ai5 TJan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401t@i TJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048-?is TJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762
e r+V: e Da
80196e9f5cfeb1b79fee9a0c7fdadd992ab7aa207db374333f67dbda5f2fd14eD`
6964dd0077dc7a05fc63ad2b2e02aecba267ac20fdf80589b768e01146960b74D_
7b90cb8bc8d2c7faf537d5ae45a0a5a1723647451341f52d133cd54aed8e427cD^
33f93263c696ee536e808126745c9fa540fc61ef70ce1cffc4848d598c98eae1D]
0c8cc9217954e5b7e4fba72b8cac347c473caf377f918d06fdc3c2bb7e672917D\
8db5b248a66cb5ad1ed9c3264fe68eb2d2de4e9b3a5c7cc07f61bde703d26938D[
d4e1ed8394af297a574fede15b7e0b3dcc28d263998175257f45e728f22fca91DZ
d1b44c5bcb094399e0bce41de4218e28b8f69fb0c0a79c24411b5561978ec6b5DY
c95477083d786f35fe049b4cf228df007b60410ff81fc37b0e6dd8bd2124cdccDX
a3a9ea28c98e59589049fb7889c20c37771b190b44b92388c4e2aa7aafcb1a2eDW
e940311272fea2057047e571496ef2c682d234a1b3e10e8c505258a1cc20ae6bDV
b128da11799b79cddf1ef0419560127564929391ef662226704b79b39ab3bb98DU
c4848c6ee81a224b1eb505bb2bf5a9c8572e930973b92319a6e17e294d14310b
1 HiO UJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560Gi UJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560KFi/ UJan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441EgA UJan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002[DgQ UJan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603
NU: ^MgY VJan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129Li UJan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159Ki5 UJan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401tJi UJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048-Iis UJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762
1 RiO VJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560Qi VJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560KPi/ VJan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441OgA VJan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002[NgQ VJan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603
. NU: . W
WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]Vi VJan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159Ui5 VJan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401tTi VJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048-Sis VJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762
7 ? 7 KZ} WJan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]3Ye WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]<Xw WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
t\g WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]i[Q WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] I
-^W WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]M] WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
< < Ka} XJan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681] `9 WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]L_ WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
tcg XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]ibQ XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] M
-eW XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]Md XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
g9 XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]Lf XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
1 i1 XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f RJh XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< Mk YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}?j{ XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
N Lm YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}-lW YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]
p1 YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f VJo YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) n9 YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< < ?q{ YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
drE YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
p ,p 7tk YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]Os YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
Pv ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol [^u9 ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 9xo ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow ^twe ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command \ erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
y y z7 ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han `Xy- ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
f{I ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o | ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
o}Y ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
q~] ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ 1l 2r 3x 4} 5 6 7 8 9 : ; <% =* >/ ?4 @9 A> BC DH EM FR GW HZ J\ K^ La Nc Oe Pg Qi Sk Tm Up Wq Xr Yt Zv ]x _z a{ b| c} d~ f g h i j k l m o p q r t u v! w# y& {' |( }) ~* + - . 0 2 4 7 9 ; = @ B C E G I J K L M N P Q R S T U W Y Z [ \ ] ^
dE [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
o ,p o |u [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]7k [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]O [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
Y }w [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]B [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}"A [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]
?{ [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]ef@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}4e [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^9 [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
X B \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}"
A \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]| u \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]
} w \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]
4e \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^
9 \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
bA \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~y \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
% n% "A ]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] 7 \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721] \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens n
}w ]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]B ]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}
4e ]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^9 ]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
bA ]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~y ]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
u n u " A ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]+ M ]Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919] 7 ]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721] ]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens s
} w ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]B ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}
4!e ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^ 9 ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
b#A ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~"y ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
n +& M ^Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919] %7 ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]$ ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens x dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
'7 _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han z
f(I _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o ) _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
o*Y _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
q+] _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
- - R- _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE ^,7 _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
, , O. _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]
' 01 _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]T/# _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]
A A 2s `Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check J1s# `Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C D4s `Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}o3sm `Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb j7sc `Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]6s1 `Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []5s7 `Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 9+ `Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]F8s `Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
;s aJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check ^:9 `Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C D=s aJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}o<sm aJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb j@sc aJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]?s1 aJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []>s7 aJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 B+ aAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]FAs aJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
^C9 aAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]
w w ^E7 bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]!D? aAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}
e r+V: e Dn
e7f2bf03392856717c1588ee1a77010b1537d1a678ed7dd1dad5ad7391cd4147Dm
82e182e512caa6c722313fe432c89e81a61b1c021c5fa0e223a163e77c95ce6eDl
f8613e068693df3d5e08f956697ae0b595071f7b8c8bbed307faf9dbadef2a8aDk
53452ad31f9655e8f71a0b4c49b118b9337855433c50f25a9f5a75b92ebb8a8aDj
645ff71bbd0c6801049154ee1c5338517839d23b8146501039a0a919dd696e33Di
a6fb96a295e675646b15c339c7b3d6070fefdec2a9d1b67402bcee35dc06bd72Dh
93f5058bbfe57b3134debfc599214a91d401380ef38ec57336a0d995704d9c26Dg
f181f4bc3868b84eb350197aee4e79d0466d5aaac0e0a70a37eb58aa7533e228Df
91d2cf4d7a40fe66ba14583d4d5f045850fefc8b26b7e0adc2634f5ec9f9a775De
3db35ae4792e6efe04cf89e50aeb71e9794589152c92cc1de54f2c92dc956b40Dd
9f794072765d2423d8dc156f9a676c6e2b29c90d2a6f4e58cb579073b02c4017Dc
996ee55268c9971d07d38c3217e0fb813a202d1b838963b6db16217069d193dbDb
b8c980b0d2eaf56affe69fde8c004c91dde7d83277578de4cfc8c06aaa322858 RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
OG bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]RF bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE
? ' ? [I1 bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 TH# bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
bJ? bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4Kc bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 JL bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 JM bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
N bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
? ' ? [P1 cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 TO# cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
bQ? cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4Rc cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 JS cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 JT cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
U cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
K K /WY cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|Vs cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
` H` [Y1 dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 3Xa cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele) ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
bZ? dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4[c dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 J\ dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 J] dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
^ dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
K K /`Y dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|_s dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 3aa dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
A A :bo dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
K K /dY eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|cs eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 3ea eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
4 A 4 g eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli):fo eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
/ / i eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]@h{ eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)
= = >jw eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
k# eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . Ml eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]
t t m fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]
= = >nw fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
o# fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . Mp fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+ r' fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}Hq fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP
S z S "t? fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]s} fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
, , v- fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]1u] fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+ x' gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}Hw gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP
S z S "z? gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]y} gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
1{] gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
| gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
} gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2_ gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]~' gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ } hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] 9 gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
"? hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]
1] hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2_ hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]' hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\
9 hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]" ? hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 9 hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2_ iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]
' iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ 9 iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"? iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 9 iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
2 2 I
iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348
n n 9 jAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]iQ iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
Y 9 jAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"? jAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]
2 2 I
jAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348
iQ jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_= jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 7 m jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
! A jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7 m jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] bR ARY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ a b d e g i j k l m n o p r t v x z { | Á} ā Ł Ɓ ǁ ȁ Ɂ ʁ ˁ
́ ́ ρ Ё ҁ Ӂ ԁ Ձ ׁ ف ځ ہ ށ ߁ ! ၹ" ⁹$ べ& 䁹) 遹, . 0 4 6 7 9 ; = ? A C D E F I J
K L O
P Q T U W Z \ ` b c g h i k n #q %r &t 'w -y /z 0| 1 7 8 9 ? @ 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348
i Q kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_!= kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 7"m kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
!$A kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7#m kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]
p ep p&_ kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]%+ kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}
! )+ lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}n([ kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig Z'3 kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
, n,[ lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig Z+3 lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]p*_ lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
. lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 -} lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
? 0 lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</w lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
" Q" 4s1 mJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []3s7 mJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]%2I lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] 1 lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}
F6s mJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]j5sc mJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]
7+ mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]
P9 mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol ^89 mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 9;o mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow t:e mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
3 3 n=[ nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig X<- mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
? nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 >} nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
? A nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}<@w nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
Q Q %CI nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] B nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\D7 nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT
P P +EU nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( SF% nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
e r+V: e D{
dd8b1af64f49b071bf8395d452ac0dd4a5272f3de913475a6e1158eba0bcf9a0Dz
4a74ed8e2ec25ff2f90a460ace450f1f5f9d8ec2388840ac54190eadc8a43575Dy
da8588048a3618261c5ce040bd0a4053c3a59f68de23dae234a757305ef02c43Dx
9e3c7f90c42ce49e7b713d239d0814692a9206c40398c880f541a2a12d8aa210Dw
6b93ef98f6a4d5466b5be6c353e9339237a7ee06b8879ce1e25290af5e63339cDv
c9bd64813e41abf55c807e7a4e61c62906d1c51817c09e583a7b4306568104a8Du
ea4070c75f7c99de5202445cbf44e188a168785685b3ee3a524f47abd2e476b2Dt
faf10a9ee4a6a84d4d3e47e83fc9b5e9820bc013e514a117737d79a517e0386aDs
10d9b8b27ee08f5090cf1a5d694548af27d8f6cdc826e69807773aeb28c9bd11Dr
f66887fb1f33b96e1102061d623623d7d06c2f8b951e00a16b5c6b4d260f7a75Dq
2a53fc6879935314c27af738cec3350d3ceb42d0ac3d7163f52ab94febb50deaDp
6f164909e08bae70614e499ae419c8240f745a3e5a7212281901e38d69a975d4Do
d407c748075b7355c9958eda5ff21771b816ee274b0d13adadeb34a3d3cb72ed
up %II oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] H oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}G oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\J7 oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT
P P +KU oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( SL% oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p MO oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%NI oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}M oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 DP oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
( ( SQ% pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p MT pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%SI pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}R pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 DU pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
% v % LW pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]V pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d
Z pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]Y) pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]X- pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
% v % L\ qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408][ qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d &`K qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
_ qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]^) qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]]- qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
x x b# qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]laW qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
Tc' qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
3 ^O$ 3 lgW rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&fK rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
e rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000] d9 qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
i i h# rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
Ti' rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
G ^ G k# rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] j9 rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( Bn rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] m rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 +lU rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 !CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 "] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
M M q# sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]lpW sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&oK sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
Tr' sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for $
G ^ G t# sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] s9 sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( Bw sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] v sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 (+uU sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} ) CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV *E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 +CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ,] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
y# tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]Lx sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
Tz' tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for .
G ^ G |# tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] {9 tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( B tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] ~ tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 2+}U tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} 3 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV 4E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 5CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 6] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
L tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]
& & U) tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 : tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV <E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 =CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 >] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
h h L uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]B uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]
& & U) uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
iQ uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243] uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @ uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7 m uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc D
1 uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
w w L
vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]3 e uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
& & U) vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
iQ vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243] vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @ vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7m vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc J1 vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
E )E _= vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]3 vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3e vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
iQ wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243] wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @ wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7m wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc O1 wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
)E 7 wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_ = wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890] 3 wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3 e wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
W W !1 xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
<e _%= xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]$3 xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3#e xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]7"m xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc R
_TH <)w xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}(
xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]' xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] &7 xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]
Hd ,7 yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_+= yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]3*e xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
( ( </w yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}.
yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]- yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]
H K1} yJan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]30e yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
t3g yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]i2Q yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] X
6s zJan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono \ 5s! zJan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do clean [M4 yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} ]v) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]
A A 8s zJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check _J7s# zJan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C D:s zJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}o9sm zJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb j=sc zJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]<s1 zJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) [];s7 zJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
h 5) h <@w {Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}?
{Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]F>s zJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
H KB} {Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]3Ae {Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
tDg {Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]iCQ {Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] d
-FW {Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]ME {Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
< < KI} |Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681] H9 {Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]LG {Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
e r+V: e D
af4714a643e3d4a5fe7d6877aeec7cfc2047da0866e0c7feb3defa34e1c54b14D
5bea05b28dab5f6e5c851855e06049b7d5dcb569c591a728efd7ea42b4a9ac8eD
33b524d6eec3fc82a17df2220b596193025c1faf20c5939c4271809681f95803D
62db43a91b2c1f3cd0407729f5c13f51ea098fea0aa9b90e2444d92166d1817dD
bb9d06747ab519acfbcb5813fc1980b1af09ff804dab7cf685cf77230153ea1aD
95abbd8b6931c04aa8fdca6df2600bc37b23414c8395a75a4ef0a54d57357161D
804cbacad84b958748331da1bcd0479ae493f31fb8564a84104a6573e7aa7c81D
2f35a9c1bf11fa8350dfd2b02c990903292933bde6dd81da9a05921d0265d756D
085f001bc61a93bf23c68f240bd7b5c24aa41e4a9b6c5539dfe676b451ec102aD
18d2703d9432cd3d8353acf0fb1f852fe4c15301b3d49fffac3f0194c6a4aaa0D~
7804215d9e8fd6eaae4ae7d7fb360dd0ec85e87ed93ec488ef3d1cb1285ff33eD}
8cdf3d0ccf31842dffcd39b5f3b05819fc442a375c03a3212e7b51db17f53e29D|
7d4cedf119f33ca8dc827b0f6f2be910119d492bf48ad4b4fd46ee45c6094800
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
tKg |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]iJQ |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] i
-MW |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]ML |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
O9 |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]LN |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
1 Q1 |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f nJP |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< MS }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}?R{ |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
N LU }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}-TW }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]
X1 }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f rJW }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) V9 }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< < ?Y{ }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
dZE }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
p ,p 7\k }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]O[ }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
P^ ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol w^]9 ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 9`o ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow zt_e ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command x erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
y y b7 ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han |Xa- ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
fcI ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o d ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ B C E
F G H I K L M N P Q! S% T) U, V/ W1 Y3 Z6 ^8 `: a= b@ cB eD fF gI jK kM lO mQ oS pU qX sY tZ u\ v^ y` {b }c ~d e f g j m p s t v x { } ! # % ' ( ) * + , . / 0 1 2 3 5 7 8 9 : ; < > Á?
oeY ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
qf] ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
dgE Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
o ,p o |ju Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]7ik Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]Oh Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
Y }mw Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]Bl Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}"kA Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]
?p{ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]ef@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}4oe Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^n9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
X Bs Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}"rA Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]|qu Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]
}tw Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]
4ve Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^u9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
bxA Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~wy Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
% n% "{A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] z7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]y Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens
}}w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]B| Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}
4e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^~9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
bA Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~ y Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
n + M Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919] 7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han
fI Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
oY Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
q ] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
- - R Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE ^
7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
, , O Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]
' 1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]T
# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]
A A s Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check Js# Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C Ds Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}osm Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb jsc Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]s1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []s7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 + Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]Fs Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
s Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check ^9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C Ds Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}osm Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb j sc Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] s1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) [] s7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 + Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]F s Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
^!9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]
w w ^#7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]!"? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
O% Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]R$ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE
? ' ? ['1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 T&# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
b(? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4)c Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 J* Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 J+ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
, Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
? ' ? [.1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 T-# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
b/? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
40c Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 J1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 J2 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
3 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
K K /5Y Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|4s Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
` H` [71 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 36a Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele) ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
b8? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
49c Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 J: Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 J; Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
< Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
K K />Y Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|=s Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 3?a Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
A A :@o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
K K /BY Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|As Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 3Ca Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
4 A 4 E Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli):Do Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
/ / G Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]@F{ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)
= = >Hw Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
I# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . MJ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]
e r+V: e D
b7d834f2cc5aa84ce95931ece2e31ba36b1622f5cf8408527a2a75727e975348D
572ff1fa3f621ad26e4183404533f0d373eee24c0a12955ab2ab39ca102d691eD
fd8e59feae40f80e38ab4a8de84b96325cd6b29832ce967fca67cb83405b1342D
de7f44e2c7986c23e352486d2894499d26f632330a153b346ea4363cdf0397cbD
dc90a5cca940b1f478ed520e28cd82492738bbb49889b2cd96a4cff2fbc503bcD
c540f6cbef4a78a050fb751882916735d1bd6054d8c177140c200cf31eaf923fD
563fbcd370477439a58af9940298f2c82a2b3a37e487abffaa7f2cc6dc359b31D
adf17c4b2070f73fe44e9fc11648947e83c86d37a4e3532c9d77d3d8e9ae50e5D
179d7e14905a53e3d09515993644464c53e8bf4c10bcd829502d153744fdf666D
a14db656a37e716de6fd51d331dc591f90b663382f88a483d40e8c847e506676D
2c64dd985521f02ada8ac0415b1d852ab79d87ebdf2950e421d8258a4d86d153D
a5f9b329bc1130ffe9bf6f2ced3317e2ad895c4559a82bdf804c8b85e4765b28D
6ce4b480a292b7fa51c31777377a1711c2537597c5cf02d8aa14b345321b67bf
t t K Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]
= = >Lw Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
M# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . MN Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+ P' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}HO Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP
S z S "R? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]Q} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
, , T- Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]1S] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+ V' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}HU Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP
S z S "X? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]W} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
1Y] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
Z Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
[ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2]_ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]\' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ _} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] ^9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
"`? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]
1a] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
b Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
c Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2e_ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]d' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ h9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"g? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] f9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
i Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
j Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2l_ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]k' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ o9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"n? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] m9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
2 2 Ip
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348
n n s9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]irQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
Y u9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"t? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]
2 2 Iv
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348
ixQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_y= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 7zm Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
!|A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7{m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m } Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348
i~Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] bR ZRY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ ŁB ƁC ǁE ȁG ɁH ʁI ˁJ ́K L ρM ЁN ҁP ӁR ԁT ցV ׁX Y فZ ځ[ ہ] ܁_ ݁` ށa ߁b c ၻe ⁻h ほi 䁻j 偻l 恻o 灻p 遻q ꁻs 끻u 쁻v w x y z | } ~
! " # $ ' ( ) !* "- #. $/ %2 &3 '5 (8 ): *> +@ -A .E /F 1G 2I 3L :O <P =R >U DW FX GZ H] N^ O_ Pa Vc Wd Xf Yg
_= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 7 m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
!A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]
p ep p_ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]+ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}
! + Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}n[ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig Z3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
, n
[ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig Z 3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]p_ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 } Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
? Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}<
w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
" Q" s1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []s7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]%I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}
Fs Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]jsc Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]
+ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]
P Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol ^9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 9o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow te Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command
erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
3 3 n[ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig X- Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 } Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
? Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}< w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
Q Q %!I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\"7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT
P P +#U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( S$% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
up %'I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] & Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\(7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT
P P +)U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( S*% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p M- Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%,I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}+ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 D. Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
( ( S/% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p M2 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%1I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}0 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 D3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
% v % L5 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]4 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d
8 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]7) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]6- Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
% v % L: Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d &>K Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]<) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954];- Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
x x @# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]l?W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
TA' Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for ,
3 ^O$ 3 lEW Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&DK Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
C Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000] B9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
i i F# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
TG' Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for 0
G ^ G I# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] H9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( BL Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] K Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 4+JU Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} 5 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV 6E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 7CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 8] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
e r+V: e D"
fe01de01f7bcb863a54f276394f9ab097a0d29db56661a42eb33d27e4bef27f8D!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 M O# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]lNW Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&MK Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
TP' Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for ;
G ^ G R# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] Q9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( BU Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] T Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ?+SU Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} @ CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV AE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 BCVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 C] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
W# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]LV Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
TX' Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for E
G ^ G Z# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] Y9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( B] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] \ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 I+[U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} J CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV KE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 LCVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 M] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
L^ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]
& & U_) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
a Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 Q` Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} R CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV SE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 TCVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 U] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
h h Lc Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]Bb Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]
& & Ud) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
ifQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @g Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7im Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc [h1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
w w Lk Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]3je Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
& & Ul) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
inQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @o Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7qm Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc ap1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
E )E _t= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]s3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3re Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
ivQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]u Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7ym Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc fx1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
)E }7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_|= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]{3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3ze Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
W W 1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]~ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
<e _= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]7 m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc i
_TH <w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] 7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]
Hd
7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_ = Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]3e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
( ( <
w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]
H K} Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]3e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
tg Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]iQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] o
s Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono s s! Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do clean rM Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} tv) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]
A A s Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check vJs# Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C Ds Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}osm Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb jsc Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]s1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []s7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
h 5) h < w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]F s Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
H K } Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]3 e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
t"g Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]i!Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] {
-$W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]M# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
< < K'} Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681] &9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]L% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
t)g Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]i(Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
-+W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]M* Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
-9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]L, Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
1 /1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f J. Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< M1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}?0{ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
N L3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}-2W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]
61 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f J5 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) 49 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< < ?7{ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
d8E Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
p ,p 7:k Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]O9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
P< Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol ^;9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 9>o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow t=e Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
y y @7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han X?- Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
fAI Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o B Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
oCY Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
qD] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ \k ]l ^n _o `q bt cv dw ey g} h j k l
m
n p q u w x y z |" }$ ~' ) + - / 1 3 6 7 8 : < > @ A B C D E H K N Q R T V Y [ ] _ b c d e f g i j l n p s u w y | ~ Á ā Ł ǁ
ȁ ʁ
ˁ ́ ́ ρ Ё с Ӂ ԁ Ձ ց ف ځ ہ ܁
dEE Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
o ,p o |Hu Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]7Gk Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]OF Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
Y }Kw Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]BJ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}"IA Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]
?N{ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]ef@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}4Me Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^L9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
e r+V: e D/
12eb69ce3ab02b67fd35247a607d73a70b5c657c3703598db21a9ebe26e45a42D.
39ce1d8d6ffa3efde898b475b2be150a92edca9d2aadf7ed8d5d69e6865175f9D-
22e7b5d6e46a23025f394d1dd9e25e4e5cfd1c5dbb00f74226f20929ee065bd9D,
1cd93bcccbab328b508e869ff3ceeaa30e1ab5ac781b7a6c3b91207832226025D+
315bb4f6a8cd60a7becf60b599198a41a19465d28cc706d98dfa3b927f357dadD*
404156845f116a61c9627f44cc1b924461c60e723c92dd3a152f2840e6e9003aD)
8764032443efee4dc7bfb0ee1a11749205880cd86b230ad538346b697120c5e7D(
b918eb715248bdb46d8f49387310a25030a9f4fe192d5ee0f69fabde9b84d42dD'
528d0642b5b6549b3084ad519bbeef6aa4048aa69d52903acce6a22132ac9303D&
97708bdbb05e028158319a2bcc0079feb219bc2cbe8d1b3c5b3861d43afd818fD%
3d08be30af99cb4e2248e149d75d36071c2dfd0806f511abe5c972b4051fe7d7D$
4d66ddd3b79ce560d9eab146d518f751de7e9ef4d667fa701a868a978f1342cbD#
211028daa1af91e1fc841cb5b76e2f4edf63f510630571253c89635fccd41209
X BQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}"PA Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]|Ou Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]
}Rw Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]
4Te Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^S9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
bVA Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~Uy Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
% n% "YA Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] X7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens
}[w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]BZ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}
4]e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^\9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
b_A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~^y Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
n +b M Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919] a7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]` Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
c7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han
fdI Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o e Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
ofY Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
qg] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
- - Ri Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE ^h7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
, , Oj Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]
' l1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]Tk# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]
A A ns Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check Jms# Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C Dps Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}oosm Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb jssc Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]rs1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []qs7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 u+ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]Fts Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
ws Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check ^v9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C Dys Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}oxsm Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb j|sc Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]{s1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []zs7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 ~+ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]F}s Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
^9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]
w w ^7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]! ? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
O Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]R Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE
? ' ? [1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 T# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
b? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4c Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 J Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 J Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
? ' ? [ 1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 ɅT # Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
b
? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4c Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 J Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 J Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
K K /Y Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|s Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
` H` [1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 ҃3a Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele) ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
b? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4c Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 J Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 J Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
K K / Y Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|s Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 3 a Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
A A : o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
K K / Y Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]| s Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 3!a Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
4 A 4 # Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli):"o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
/ / % Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]@${ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)
= = >&w Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
'# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . M( Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]
t t ) Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]
= = >*w Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
+# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . M, Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+ .' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}H- Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP
S z S "0? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]/} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
, , 2- Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]11] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+ 4' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}H3 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP
S z S "6? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]5} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
17] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
8 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2;_ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]:' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ =} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] <9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
">? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]
1?] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
@ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
A Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2C_ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]B' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ F9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"E? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] D9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
G Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
H Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2J_ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]I' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ M9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"L? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] K9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
2 2 IN
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m O Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348
n n Q9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]iPQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
e r+V: e D<
eeb0ed8d5fd30d98e3bef225ead945fafb2e3dbd8cea8e4b45565671473073d7D;
2111718d7572c52cddb1070151dd723808174e0f46528dd636ee9dd3afc41523D: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 S9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"R? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]
2 2 IT
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348
iVQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_W= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 7Xm Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
!ZA Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7Ym Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m [ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348
i\Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_]= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 7^m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] bR sRY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ ށ# ߁% & ၾ' ⁾( ま) 䁾* 偾+ 恾, 聾. 遾0 ꁾ2 쁾4 큾6 7 8 9 ; = > ? @ A C F G H J M N O Q S T U V W X Z [ \
] ^ ` b e h j l p r !s "u %w 'y ,{ .} / 1 2 3 4 6 7 8 9 : ;
< = > ? @ A B D E# F$ H% I' J* P- R. S0 T3 Z5 \6 ]8 ^; d< e= f? lA mB nD oE pG rI
!`A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7_m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]
p ep pb_ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]a+ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}
! e+ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}nd[ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig Zc3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
, nh[ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig Zg3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]pf_ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
j Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 i} Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
? l Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}<kw Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
" Q" ps1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []os7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]%nI Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}
Frs Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]jqsc Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]
s+ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]
Pu Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol #^t9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 9wo Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow &tve Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command $ erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
3 3 ny[ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig (Xx- Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} )et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush *if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r +eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
{ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 -z} Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
? } Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}<|w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
Q Q %I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] ~ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\ 7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT 0
P P +U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( S% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
up %I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT 5
P P +U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( S% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p M Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%
I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492} Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 D Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
( ( S
% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p M Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492} Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 D Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
% v % L Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]- Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
% v % L Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d & K Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]- Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
x x # Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]l W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T ' Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for C
3 ^O$ 3 l#W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&"K Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
! Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000] 9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
i i $# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T%' Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for G
G ^ G '# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] &9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( B* Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] ) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 K+(U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} L CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV ME-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 NCVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 O] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
M M -# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]l,W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&+K Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T.' Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for Q
G ^ G 0# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] /9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( B3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] 2 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 U+1U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} V CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV WE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 XCVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 Y] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
5# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]L4 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T6' Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for [
G ^ G 8# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] 79 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( B; Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] : Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 _+9U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} ` CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV aE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 bCVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 c] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
L< Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]
& & U=) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
? Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 g> Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} h CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV iE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 jCVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 k] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
h h LA Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]B@ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]
& & UB) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
iDQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]C Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @E Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7Gm Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc qF1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
w w LI Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]3He Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
& & UJ) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
iLQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]K Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @M Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7Om Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc wN1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
E )E _R= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]Q3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3Pe Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
e r+V: e DI
6cfb6bf58c05c3d5623f5406c5e146a76aced8a97fef4153ef7d295cc5776298DH
d093869ed5878283193de6a764e7847674976671131c829603d9981e56660bfbDG
bf08078851ef715022279479446f3e390e30bd92cb15b2aed42318fb677e40a0DF
aed30d0de3bf0d71c9c9be43e3e4b5e8d6832a7e755e8cfd843a6bd7f735d310DE
cfde4230671763bf6a464de9ec8c191195c9ae864571afd92bc7bea8dfcbb11eDD
e3d2e5a0802cde0d09552d1bd3102383e1851a9aecf88fd83a5fb81baae6d53cDC
e357af06726c5602fad5542ef0502f94391737c732c9fbf6706f80fb6757f197DB
0eec836c027a565c281645294b192571bfe852631d94438627371cba58c380deDA
7eee4abf22678a8043377d3ff29621b20a1dbe6da04bb0918068ef07eacf23e7D@
ef3258341d0c757014a17a4cc94207f623282b6190b470f1517c29d8bb42218fD?
a663038e5d2fe0f26775744ace593a48c274a77a69c51d4592701ea604272ae1D>
610253d61d946788184230adb18227e8e92b245a2c2244a5d929b1b096fe7faaD=
3668549b1c43bc2b0dd420108f4ebcc8bff57ef08d4b839f3f8e6f9c4691f314
iTQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]S Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7Wm Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc }V1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
)E [7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_Z= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]Y3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3Xe Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
W W ]1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]\ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
<e _a= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]`3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3_e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]7^m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc
_TH <ew Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}d
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]c Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] b7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]
Hd h7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_g= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]3fe Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
( ( <kw Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}j
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]i Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]
H Km} Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]3le Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
tog Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]inQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
rs Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono qs! Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do clean Mp Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} v) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]
A A ts Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check Jss# Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C Dvs Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}ousm Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb jysc Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]xs1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []ws7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
h 5) h <|w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}{
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]Fzs Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
H K~} Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]3}e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
t g Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]iQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
-W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]M Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
< < K} Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681] 9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]L Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
tg Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]iQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]M Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]L
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
1
1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f J Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< M Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}?{ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
N L Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}-W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]
1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f J Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) 9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< < ?{ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
dE Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
p ,p 7k Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]O Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
P Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol ^9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 9 o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow te Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
y y 7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han X - Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
f I Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
o!Y Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
q"] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
d#E Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
o ,p o |&u Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]7%k Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]O$ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ tL uM vO xR zT {U |W ~[ ] a e h k m o r t v y | ~
! " # & ) , / 0 2 4 7 9 ; = @ A B C D ÁE āG ƁH ǁJ ȁL ʁN ˁQ ́S ́U ЁW сZ ҁ\ Ӂ] ԁ_ ցa ׁc فd ځe ہf ܁g ށh ߁j k l m n o q s t u v w x z { | ~
Y })w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]B( Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}"'A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]
?,{ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]ef@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}4+e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^*9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
X B/ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}".A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]|-u Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]
}0w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]
42e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^19 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
b4A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~3y Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
% n% "7A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] 67 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]5 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens
}9w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]B8 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}
4;e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^:9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
b=A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~<y Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
n +@ M Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919] ?7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]> Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
A7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han
fBI Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o C Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
oDY Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
qE] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
- - RG Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE ń^F7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
, , OH Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]
' J1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]TI# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]
A A Ls Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check ɆJKs# Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C DNs Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}oMsm Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb jQsc Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]Ps1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []Os7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 S+ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]FRs Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
Us Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check υ^T9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]
e r+V: e DV
66af09f68408482637e668b90619392a27fa21b7d4ed06f3c3cbc60d87ce1d78DU
c9c2a62c7fb170cc9007afb571d8b9beab632b42aaef2f1461f8ba0a2c5f6d9aDT
619978f4cd3319fc56335a010d227ac9446de3fe27758ad4f22319183b1a35bbDS
e1d60b061557e368c20da15e4517376a49df65648636bd09fa3baa81f162391dDR
2c612e423c3e3ace2108965f2996ecb1002eee8415cdce8e05c58aafa5f37306DQ
f066c4d77c32004d1843615beab2f59dce9664e5e79aaf6f5453d44d0d9e02feDP
72dc266e5da09e38d19f4c3904bdb983146af68adbe466120ff8bfecdb4567bfDO
5ec120d1c66453ab1a85e5107b0b4457686f595cf2e8dfc5ca04adcec4f0ade0DN
7d9fd10906d65ff1e5f7dc8aed453f9fa04ddb34ca3a6622b45b15bbf2b7dc66DM
ea73cbefe91a8c86fea9a227d19b9f36d68daa5f9e640d6d6acf7a6ad65c4297DL
e2b80fc90e80e10166a785ab1c718ed12380055d955ab295c5363ad6405fe815DK
3f77e8c91079e010fb161e28eaf613452e1c25d2d67b0367cb344f3141bf3cb9DJ
1a74fcb33103de74d5129a6eea3fe37137b7cbdc136b11a49f79822b8fbd6194 to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C DWs Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}oVsm Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb jZsc Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]Ys1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []Xs7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 \+ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]F[s Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
^]9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]
w w ^_7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]!^? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
Oa Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]R` Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE
? ' ? [c1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 Tb# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
bd? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4ec Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 Jf Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 Jg Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
h Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
? ' ? [j1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 Ti# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
bk? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4lc Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 Jm Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 Jn Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
K K /qY Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|ps Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
` H` [s1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 3ra Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele) ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
bt? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4uc Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 Jv Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 Jw Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
x Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
K K /zY Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|ys Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 3{a Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
A A :|o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
K K /~Y Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|}s Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 3a Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
4 A 4 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli): o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
/ / Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]@{ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)
= = >w Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . M Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]
t t Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]
= = >w Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . M
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+ ' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}H Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP
S z S "? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]
} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
, , - Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]1] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+ ' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}H Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP
S z S "? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
1] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2_ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ } Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] 9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
" ? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]
1 ] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2!_ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499] ' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ $9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"#? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] "9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
% Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
& Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2(_ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]'' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ +9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"*? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] )9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
2 2 I,
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m - Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348
n n /9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]i.Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
Y 19 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"0? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]
2 2 I2
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m 3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348
i4Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_5= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 76m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
!8A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]77m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m 9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348
i:Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_;= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 7<m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
!>A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7=m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]
p ep p@_ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]?+ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{
! $ % & ( + , - / 1 2 3 4 5 6 8 !9 ": #; $< %> &@ (C -F 2H 4J 5N 6P 7Q 8S ;U =W CY E[ F] H^ I_ J` Kc Md Ne Of Pi Qj Rk Sn To Uq Vt Wv Xz Y| [} \ ] _ ` a g i j k q s t u { | } " # % ' ( *
! C+ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}nB[ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig )ZA3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] *et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush +if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r ,eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
, nF[ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig .ZE3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]pD_ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] /et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush 0if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r 1eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
H Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 3G} Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
? J Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}<Iw Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
" Q" Ns1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []Ms7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]%LI Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] K Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}
FPs Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]jOsc Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]
Q+ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]
PS Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol 9^R9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 9Uo Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow <tTe Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command : erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
3 3 nW[ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig ?XV- Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}
e r+V: e Dc
8c51f1c38ad47d554e10f738e37c0bf122f76f4859f755e0449895448111fdfbDb
618bc94e003b50654a567449109303c221bd56c7f188de529a8d1ab1d8e20fd8Da
90add33a3f4cc834b9be91c4ccc12114abeee16aab262829030db0c9ce27fafeD`
61cfa80ff521cdee2ca184780c2e8e55454cba77894c18944b233eb145b6c262D_
8cd2d58f528256baddd73bebea799773f83bd54624d090696d0c2ca0cac8656dD^
9c8552ce4b79fef3a8e7b55a85b91bd83e2f2765635056bc7064ab7d071c6e1aD]
f5394565fcf1a20382bcdd1f64e77e587e222a4e135860c31a6a2b4f012e4691D\
f0308f6cab8d1b2a831f455e5c9950062be00908841b0a04d0555377c61e49caD[
c4dd18d9c01ea40a453a4a345bdb13d9ca5f3315e69e78ce7e1f9798972a5d47DZ
a219dbccfdca9ac57c9b9064dffadc0044870709a425252ba874f86cfa15084cDY
bae6332ef212f5e4fe0b1eada2f87ebde9f8d0ae3bc2bf1231463bddc7837af2DX
5b152b26c3cb00751f5faf6a0e5bf8cffab7cb953c9a7a44d5c064beadb2c64bDW
5b75d2143ffe291c5183924ee30ab08ceb34c6da47f540b55f39025c5123e419 @et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush Aif write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r Beform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
Y Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 DX} Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
? [ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}<Zw Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
Q Q %]I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] \ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\^7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT G
P P +_U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( S`% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
up %cI Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] b Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}a Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\d7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT L
P P +eU Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( Sf% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p Mi Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%hI Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}g Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 Dj Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
( ( Sk% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p Mn Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%mI Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}l Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 Do Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
% v % Lq Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]p Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d
t Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]s) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]r- Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
% v % Lv Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]u Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d &zK Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
y Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]x) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]w- Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
x x |# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]l{W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T}' Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for Z
3 ^O$ 3 lW Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]& K Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000] ~9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
i i # Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T' Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for ^
G ^ G # Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] 9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( B Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 b+U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} c CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV dE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 eCVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 f] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
M M # Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]l
W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]& K Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T ' Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for h
G ^ G # Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]
9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( B Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 l+U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} m CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV nE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 oCVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 p] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]L Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T' Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for r
G ^ G # Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] 9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( B Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 v+U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} w CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV xE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 yCVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 z] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
L Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]
& & U) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ~ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
h h L Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]B Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]
& & U ) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
i"Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]! Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7%m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc $1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
w w L' Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]3&e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
& & U() Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
i*Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @+ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7-m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc ,1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
E )E _0= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]/3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3.e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
i2Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 75m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc 41 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
)E 97 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_8= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]73 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}36e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
W W ;1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]: Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
<e _?= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]>3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3=e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]7<m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc
_TH <Cw Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}B
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] @7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]
Hd F7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_E= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]3De Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
( ( <Iw Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}H
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]G Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]
H KK} Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]3Je Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
tMg Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]iLQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
Ps Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono Os! Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do clean MN Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} v) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]
A A Rs Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check JQs# Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C DTs Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}oSsm Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb jWsc Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]Vs1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []Us7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
h 5) h <Zw Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}Y
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]FXs Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
e r+V: e Dp
ad7bce9b915192b7b549afd2ed6063d2ada93cb004d25d42dc82dd3313d82a37Do
52fc84afa30b500c79c2116a67a199c3eba6bbed1b7b171fc4fec483dc2c9f4cDn
4abf0ebc2127e7a5b5dfb595fa447cb44f339ff023ce88bb0a97992bba4cd3a9Dm
961c48cd798bb2acb18bcb4bd7ebd24f8752f021a87363745131dc5e83535165Dl
cd7d87fbf38e3d491a5a8b262d70dddd01ac00ec722b52c01b44e67f7d8c5a66Dk
e7e90b3e6ae85deb749d4071a5467a5a718a12808213ecd6657a9d70d12129ceDj
b1985dc9a05a3ffe2eac12dd0ba63fc7285e6ca29af03c0351ff2b6bcbd39822Di
c20dbccc7c4cc73173c89b3632eb2dbf33e22faaaf1b317279ecad8e2b1fe49bDh
74dfc146e5e4ab219dba838033e3a2a983e2ad796cee5a175fda1b6c17653193Dg
c59ce9d5e2b28c278b947391fce0c591d912b04727d6141c27262cf98fb99844Df
a2341873756b6756d7b18967c3dd2b6ce12fff550f0837ea9361171291c42397De
c4bc426d70f27932111cdba1edd2eb69526aef608fccde2da51a6282a479270cDd
6cf85cafbf0ed8b58696a680262f819d5ebbe64f5d4ce8010a037a47a9f1ae9f
H K\} Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]3[e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
t^g Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]i]Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
-`W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]M_ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
< < Kc} Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681] b9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]La Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
teg Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]idQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
-gW Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]Mf Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
i9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]Lh Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
1 k1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f Jj Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< Mm Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}?l{ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
N Lo Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}-nW Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]
r1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f Jq Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) p9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< < ?s{ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
dtE Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
p ,p 7vk Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]Ou Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
Px Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol ^w9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 9zo Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow tye Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
y y |7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han X{- Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
f}I Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o ~ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
oY Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
q ] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
dE Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
o ,p o |u Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]7k Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]O Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
Y }w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]B Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}"A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]
?
{ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]ef@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}4 e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ - 0 2 3 5 9 ; ? C F I K M P R T W Z \ ^ ` c e g i k m o r s t v x z | } ~ Á ā Ł Ɓ ǁ ȁ
ʁ
ˁ ́ ́ ρ Ё с ҁ ԁ ց ׁ ! ف" ځ# ہ% ݁& ށ( ߁* , / 1 3 5 8 : ; = ? A B C D E F H I J K L M O Q R S T U V X Y Z
\ ] _
a b
X B
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}" A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]| u Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]
}w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]
4e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
bA Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~y Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
% n% "A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] 7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens
}w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]B Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}
4e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
bA Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~y Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
n + M Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919] 7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han
f I Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o ! Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
o"Y Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
q#] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
- - R% Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE ܄^$7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
, , O& Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]
' (1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]T'# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]
A A *s Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check J)s# Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C D,s Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}o+sm Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb j/sc Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840].s1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []-s7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 1+ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]F0s Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
3s Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check ^29 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C D5s Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}o4sm Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb j8sc Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]7s1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []6s7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 :+ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]F9s Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
^;9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]
w w ^=7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]!<? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
O? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]R> Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE
? ' ? [A1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 T@# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
bB? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4Cc Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 JD Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 JE Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
F Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
? ' ? [H1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 TG# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
bI? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4Jc Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 JK Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 JL Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
M Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
K K /OY Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|Ns Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
` H` [Q1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 3Pa Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele) ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
bR? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4Sc Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 JT Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 JU Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
V Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
K K /XY Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|Ws Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 3Ya Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
A A :Zo Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
e r+V: e D}
d41b5d8b6192712bf36a8ca2a106db94ce0b4451ac3b212fd91ab7cb0ed75e82D|
9b3822948ac2fa18132b7f9d9a7d2a194615f396f5dc14dd0ecaa0ee2975470eD{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 K /\Y Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|[s Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 3]a Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
4 A 4 _ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli):^o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
/ / a Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]@`{ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)
= = >bw Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
c# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . Md Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]
t t e Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]
= = >fw Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
g# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . Mh Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+ j' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}Hi Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP
S z S "l? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]k} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
, , n- Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]1m] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+ p' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}Ho Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP
S z S "r? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]q} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
1s] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
t Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
u Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2w_ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]v' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ y} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] x9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
"z? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]
1{] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
| Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2_ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]~' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ 9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2_ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ 9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
2 2 I
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 ,
n n
9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]i Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
Y 9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]
2 2 I
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 1
iQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 7m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
!A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 7
iQ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 7m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
! A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]
p ep p _ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] + Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}
! !+ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}n [ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig ?Z 3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] @et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush Aif write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r Beform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
, n$[ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig EZ#3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]p"_ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ d e f g h j l n p r s t u w y !z "{ #| $} % & ' ( ) * +
- .
/ 0 2 3 4 5 6 8 9 : ; < = >! C$ I& K( L, M. N/ O1 R3 T5 Y7 [9 \; ^< _= `> aA cB dC eD fG gH hI iL jM kO lR mT nX oZ q[ r_ t` va wc xf ~i j l o q r t w x y { } ~ Fet() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush Gif write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r Heform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
& Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 J%} Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
? ( Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}<'w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
" Q" ,s1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []+s7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]%*I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] ) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}
F.s Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]j-sc Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]
/+ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]
P1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol P^09 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 93o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow St2e Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command Q erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
3 3 n5[ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig UX4- Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} Vet() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush Wif write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r Xeform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 Z6} Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
? 9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}<8w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
Q Q %;I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] : Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\<7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT ]
P P +=U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( S>% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
up %AI Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] @ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}? Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\B7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT b
P P +CU Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( SD% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p MG Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%FI Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}E Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 DH Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
( ( SI% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p ML Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%KI Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}J Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 DM Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
% v % LO Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]N Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d
R Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]Q) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]P- Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
% v % LT Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]S Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d &XK Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]V) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]U- Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
x x Z# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]lYW Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T[' Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for p
3 ^O$ 3 l_W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&^K Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
] Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000] \9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
e r+V: e D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~
89fc26f9b9704d242bcd1974e846283609f11bf4dc47d614efae548b2b836ec9
i i `# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
Ta' Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for u
G ^ G c# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] b9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( Bf Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 y+dU Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} z CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV {E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 |CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 }] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
M M i# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]lhW Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&gK Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
Tj' Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
G ^ G l# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] k9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( Bo Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] n Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 +mU Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
q#
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]Lp Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
Tr'
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
G ^ G t#
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] s9
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( Bw
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] v
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 +uU
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
Lx
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]
& & Uy)
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
{
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 z
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
h h L}
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]B|
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]
& & U~)
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
i Q
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7m
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc 1
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
w w L
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]3e
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
& & U)
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
iQ
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7 m
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc
1
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
E )E _=
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]
3
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3 e
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
iQ
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7m
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc 1
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
)E 7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_=
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]3
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3e
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
W W 1
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
<e _ =
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890] 3
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3e
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]7m
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc
_TH <!w
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] 7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]
Hd $7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_#=
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]3"e
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
( ( <'w
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}&
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]%
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]
H K)}
Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]3(e
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
t+g
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]i*Q
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
.s
Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono -s!
Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do clean M,
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} v) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]
A A 0s
Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check J/s#
Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C D2s
Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}o1sm
Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb j5sc
Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]4s1
Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []3s7
Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
h 5) h <8w
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]F6s
Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
H K:}
Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]39e
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
t<g
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]i;Q
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
->W
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]M=
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
< < KA}
Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681] @9
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]L?
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
tCg
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]iBQ
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
-EW
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]MD
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
G9
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]LF
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
1 I1
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f ȃJH
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< MK
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}?J{
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
N LM
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}-LW
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]
P1
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f ̃JO
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) N9
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< < ?Q{
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
dRE
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
p ,p 7Tk
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]OS
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
PV
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol х^U9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 9Xo
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow ԉtWe
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
y y Z7
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han քXY-
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
f[I
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o \
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
o]Y
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
q^]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
e r+V: e D
d79bdff199cc5f9127f01f99ca4906b965b3c5fb198906c1ed16e725d5bbe25fD
5573691deaca712e1478b3d889fe322be138680d8955a04b75e3a0066e099ca2D
28f85ca5b6e7c2b1e3ab7c4b31675583e8a72c18188f86f288a9a9bc046a202cD
d561b43042ddb9d02a31ae81d1c4935a05988542719e259b277dfcc2995339cfD
4f26a49ed12aa41e17cd5c146486cc8db5796101704d7b492066007312935250D
cda402fcb291052201381d37c733af954d30e2e6e3f24e5b636ae67715e8c0d0D
29feb5e5f9922979d66fabe2aac8bd7fdd18f1915777acf5b360bb7e5cdb0109D
4eb98f8f58cf6cec17799f6df6cd52b55de57ac3aef90f330df1e07c1f8f3702D
82269d23d95a9f1e1e213464701f07feb1fb5233bc66364a7b39d1a25b4a7a72D
4684e767f94d3dbc6eaccc3037287d441ff4f9d0bda6586211a7181edd68f6a8D
289a95c54f089f8ce63931c0b1b113b2e0f6b74f859eb3900ce19534baafd6d4D
16a9d3e7ce759abfcc7721bbe369b46acd4b3c511910e0ac4f61445d857f52d8D
b5a460913216927a863650ccef6d332b05a92836c9647e73a369720e9156fe84
d_E
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
o ,p o |bu
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]7ak
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]O`
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
Y }ew
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]Bd
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}"cA
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]
?h{
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]ef@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}4ge
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^f9
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
X Bk
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}"jA
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]|iu
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]
}lw
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227] bR 'RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ ! $ ' ) + . 0 2 5 8 : < > A āC ŁE ƁG ǁI ɁK ʁM ˁP ́Q R ρT ЁV ӁX ՁZ ׁ[ \ ف] ځ^ ܁_ ݁b ށe ߁h k l n p s u w y | } ~
! " # $ & ' ( ) * + - / 0 1 2 3 4 6 7 8 : !; "= #? $@ %A &B
4ne
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^m9
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
bpA
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~oy
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
% n% "sA
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] r7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]q
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens
}uw
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]Bt
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}
4we
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^v9
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
byA
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~xy
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
n +| M
Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919] {7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]z
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
}7
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han
f~I
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
o Y
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
q]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
- - R
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE ^7
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
, , O
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]
' 1
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]T#
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]
A A s
Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check Js#
Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C D
s
Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}o sm
Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb j
sc
Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] s1
Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) [] s7
Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 +
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]Fs
Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
s
Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check ^9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C Ds
Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}osm
Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb jsc
Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]s1
Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []s7
Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 +
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]Fs
Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
^9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]
w w ^7
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]!?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
O
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]R
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE
? ' ? [ 1
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 T #
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
b ?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4!c
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 J"
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 J#
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
$
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
? ' ? [&1
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797
T%#
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
b'?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4(c
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 J)
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 J*
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
+
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
K K /-Y
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|,s
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
` H` [/1
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 3.a
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele) ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
b0?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
41c
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 J2
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 J3
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
4
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend
K K /6Y
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|5s
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 37a
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
A A :8o
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
K K /:Y
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|9s
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 3;a
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
4 A 4 =
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli):<o
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
/ / ?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]@>{
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)
= = >@w
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
A#
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . MB
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]
t t C
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]
= = >Dw
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
E#
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . MF
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+ H'
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}HG
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP +
S z S "J?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]I}
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
, , L-
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]1K]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+ N'
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}HM
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP /
S z S "P?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]O}
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
1Q]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
R
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
S
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2U_
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]T'
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ W}
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] V9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
"X?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]
1Y]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
Z
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
[
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2]_
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]\'
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ `9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"_?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] ^9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
e r+V: e D$
53cc61153b028eb77eee99eb4b318593a92007ff036a6f6a823411e1ac986690D#
51f9017134f88118879ffbdb248450e3b3d9099bcd70dd6c20b9044df41ebaadD"
6f9c2eab5630c71a827f71ce416ea6cd0c6b2aba734a2d023f35f7af3d415da4D!
f7f4d9e5559f8b130d55ce0048a0976d08ca48b1e818df7319c89d168e26c14eD
0b31fcea001c43db8cd9d635933b11a63756f99e56b454bbfd3b201a1ec4a077D
8a6c2691d1645347df9eff452b78fb18042623b1204c96aafae8161528c51327D
3ad9c854816cd51073279e25d66deb06e14c0f98f40cc6d468a2d1aee2d2c284D
34d206ee003d27edc3b435c9aecc9569a8efa0cebca782b60e595b2c78f06326D
f6c9684def9cd5c7f66fcd886ee8773d2b2f5ae9bdb6dfb6f71d2377b140d30dD
dc83e35a513a39a6511e6815dff7c318849b1e9ec3399ac8de14115dd8663f84D
a80e94c28a71146376496e2e9902a431fca968386feb3bcfc1a8b876f55f48ceD
bf636c3d1c7371276e6fcf8c17bb54ad4a7b3adb5b7ac282711c4d8559a5996bD
6a841f73df251cdd51f2173820d7aefd9cdad93e87f34531d4856379e80aebfc
a
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
b
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2d_
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]c'
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ g9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"f?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] e9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
2 2 Ih
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m i
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 C
n n k9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]ijQ
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
Y m9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"l?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]
2 2 In
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m o
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 H
ipQ
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_q=
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 7rm
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
!tA
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7sm
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m u
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 N
ivQ
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_w=
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 7xm
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
!zA
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7ym
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]
p ep p|_
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]{+
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}
! +
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}n~[
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig VZ}3
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] Wet() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush Xif write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r Yeform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
, n[
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig [Z3
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]p _
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] \et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush ]if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r ^eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 `}
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
?
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}<w
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ (D )E *F ,H -J .L 0N 1P 2Q 3R 4S 5U 6W 7X 8Y 9Z :[ ;] <` >a ?b @d Ag Bh Di Ek Fm Gn Io Jp Kq Lr Mt Ou Pv Qw Rx Sz T| U Z _ a c
d e
f i k p r s u v w x z {! |" }% ~& ' * + - 0 2 6 8 9 = > ? A D G H J M O P R U V W Y [ \ ^ _ a c d f g i l n
" Q"
s1
Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) [] s7
Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]%I
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}
F s
Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]j sc
Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]
+
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]
P
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol g^9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 9o
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow jte
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command h erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
3 3 n[
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig lX-
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} met() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush nif write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r oeform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 q}
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
?
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}<w
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
Q Q %I
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT t
P P +U
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( S %
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
up % I
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\ 7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT y
P P +!U
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( S"%
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p M%
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%$I
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}#
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 D&
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
( ( S'%
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p M*
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%)I
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}(
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 D+
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
% v % L-
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408],
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d
0
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]/)
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954].-
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
% v % L2
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]1
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d &6K
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
5
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]4)
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]3-
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
x x 8#
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]l7W
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T9'
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
3 ^O$ 3 l=W
!Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&<K
!Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
;
!Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000] :9
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
i i >#
!Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T?'
!Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
G ^ G A#
!Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] @9
!Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( BD
!Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] C
!Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 +BU
!Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
M M G#
"Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]lFW
"Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&EK
"Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
TH'
"Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
G ^ G J#
"Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] I9
"Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( BM
"Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] L
"Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 +KU
"Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
O#
#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]LN
"Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
TP'
#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
G ^ G R#
#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] Q9
#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( BU
#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] T
#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 +SU
#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
LV
#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]
& & UW)
#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
Y
$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 X
#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
h h L[
$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]BZ
$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]
& & U\)
$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
i^Q
$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]]
$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @_
$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7am
$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc `1
$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
w w Lc
%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]3be
$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
e r+V: e D1
0cdf4d5f9455b9e3e0eeca97fcb7fa4f7b76899970af7d0fa1bdc2c1ade16fe2D0
d81c62d59566998fb91a334f86a794e936a86dbd458bf3633b8ab3f2d471e581D/
bbfb59fb0bbbee9e6941d7531aa54e1719671ed000cfb77426d6cc19506cebe1D.
4aeb221b696dbe4b67c7b108b689cf26df6c7baa673fd4a529bd4df444eaf4fcD-
1bab4a2f960faa0a69de616785116c776e018a15bdc67d8f57416af2a12896dbD,
c1a6b5c7d510c383e4cd61ceed4ca28f3f378bc0b62830d40f4fcb14f147b555D+
43b8b70412f6c494314d9177182cfca0820391aec220e38ecf47b9fb9d4acd86D*
4d332cc4ff11d1dc4a0a7e039eb49da22510476539025c6d32b9a5a212c7cfc5D)
0bb28c9f68dfa70b3b78027fb8b42c4122bccb671f14d669ce89f85990ee5c7bD(
77eccc75e9f9bd1beac93212452f411060218b9f17289e0f6bd3b293aaeaf916D'
4f80068ba1aae1df0b1a343be00c4f8225667afd61a123bede56704529ab3f6cD&
5c75d507373106773899d8f085ed0c9921518de33190dfac20ba2aa951e5b2c2D%
ae7235d8eadd22bf19fca7e2a758e17a26c6d01caf6e81861e6bf603fe82cb51
& & Ud)
%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
ifQ
%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]e
%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @g
%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7im
%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc h1
%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
E )E _l=
%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]k3
%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3je
%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
inQ
&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]m
&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @o
&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7qm
&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc p1
&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
)E u7
&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_t=
&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]s3
&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3re
&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
W W w1
'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]v
&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
<e _{=
'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]z3
'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3ye
'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]7xm
'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc
_TH <w
'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}~
'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]}
'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] |7
'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]
Hd 7
(Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_=
(Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]3 e
'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
( ( <w
(Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}
(Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]
(Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]
H K}
(Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]3e
(Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
t g
(Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]iQ
(Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
s
)Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono Ί s!
)Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do clean ͂M
(Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} v) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]
A A s
)Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check цJ
s#
)Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C Ds
)Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}osm
)Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb jsc
)Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]s1
)Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []s7
)Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
h 5) h <w
*Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}
*Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]Fs
)Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
H K}
*Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]3e
*Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
tg
*Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]iQ
*Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- W
*Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]M
*Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
< < K }
+Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681] 9
*Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]L
*Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
t!g
+Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]i Q
+Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
-#W
+Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]M"
+Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
%9
+Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]L$
+Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
1 '1
+Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f ߃J&
+Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< M)
,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}?({
+Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
N L+
,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}-*W
,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]
.1
,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f J-
,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) ,9
,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< < ?/{
,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
d0E
,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
p ,p 72k
,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]O1
,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
P4
-Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol ^39
-Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 96o
-Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow t5e
-Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
y y 87
-Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han X7-
-Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
f9I
-Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o :
-Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
o;Y
-Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
q<]
-Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
d=E
.Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
o ,p o |@u
.Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]7?k
.Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]O>
.Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
Y }Cw
.Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]BB
.Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}"AA
.Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]
?F{
.Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]ef@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}4Ee
.Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^D9
.Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
X BI
/Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}"HA
/Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]|Gu
/Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]
}Jw
/Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]
4Le
/Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^K9
/Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
bNA
/Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~My
/Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] bR @RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ q u Áw Ł{ Ɓ ǁ ȁ Ɂ ˁ ́ Ё ҁ Ӂ ԁ Ձ ׁ ف ہ! ܁# ݁% ށ' ) + . / 0 2 4 6 8 9 : ; < = @ C F I J L N Q S U W Z [ \ ] ^ _ a
b d
f h k m o q t v w y { } ~ " # % & ' ( * + ,
. / 0 1 3 4 5 6 7 8 9 : ; < = >! ?" ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
% n% "QA
0Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] P7
/Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]O
/Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens
}Sw
0Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]BR
0Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}
4Ue
0Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^T9
0Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
bWA
0Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~Vy
0Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
n +Z M
0Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919] Y7
0Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]X
0Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
[7
1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han
f\I
1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o ]
1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
o^Y
1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
q_]
1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
- - Ra
1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE ^`7
1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
, , Ob
1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]
' d1
1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]Tc#
1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]
e r+V: e D>
4effc7564fc196a4c6411751bedca4e9e01367a459bcaff78bc6849dc7cf71f5D=
4fdc56dc0f2c90e2f3e04a9191f8f4da825b37f6ac25fe246820e255ce02e8a1D<
e6bb8a9138e3246eedff3c7522b5bdd6a006e9d47913ff4c10817c6036530510D;
2e6658df1cad274f8acd004adf1a98e57338b7aeae5ac65e2c25e78bfe0d2f99D:
2617375bbb0a52fe637164f0f40bbbc00ea29b150dd35ba0e0f79447454ad604D9
3c1d7d5a10b6bbb96820657c57af7a774ba60dd1acb011d623b218102b3251f3D8
68cfd2b5e2aa6b9bad7a4040def6ccec2aa6ca31c6acf4758e98b507e8efc105D7
e8c1f68569cc209cc9fa2df02ad4b7b0845192e6e74e5167c8cf3400acdc4c2bD6
2e4f169246c2ce1c02926c3021b68913f273ab5b7474087d761d93b81e98eedbD5
2a69b561a8c58b7ed126929ce0f305827b54da8604e8f662568fc8ec96090f26D4
21af3e26269599f29ef700b687a3e84539aa03ffc025f0794649d54f0a041582D3
454bbafafa2ed6a940377a73f755cc70525a8547533b1c20ff588842216101d0D2
4d236aaf4435c04e7eca7641052df2e7fe956b46c24fdf530db5d3367025b1f4
A A fs
2Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check Jes#
2Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C Dhs
2Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}ogsm
2Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb jksc
2Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]js1
2Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []is7
2Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 m+
2Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]Fls
2Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
os
3Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check ^n9
2Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C Dqs
3Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}opsm
3Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb jtsc
3Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]ss1
3Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []rs7
3Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 v+
3Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]Fus
3Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
^w9
3Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]
w w ^y7
4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]!x?
3Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
O{
4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]Rz
4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE
? ' ? [}1
4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 T|#
4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
b~?
4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4c
4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 J
4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 J
4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend !
? ' ? [1
5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 $T#
5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
b?
5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4c
5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 J
5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 J
5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend )
K K / Y
5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|
s
5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
` H` [
1
6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 -3 a
5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele) ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
b?
6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4c
6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 J
6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 J
6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend 2
K K /Y
6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|s
6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 3a
6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
A A :o
6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
K K /Y
7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|s
7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 3a
7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
4 A 4
7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli):o
7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
/ /
7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]@ {
7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)
= = > w
7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
#
7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . M
7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]
t t !
8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]
= = >"w
8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
##
8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . M$
8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+ &'
8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}H%
8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP B
S z S "(?
8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]'}
8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
, , *-
8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]1)]
8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+ ,'
9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}H+
9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP F
S z S ".?
9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]-}
9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
1/]
9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
0
9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
1
9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 23_
9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]2'
9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ 5}
:Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] 49
9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
"6?
:Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]
17]
:Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
8
:Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
9
:Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2;_
:Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]:'
:Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ >9
:Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"=?
:Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] <9
:Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
?
;Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
@
;Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2B_
;Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]A'
;Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ E9
;Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"D?
;Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] C9
;Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
2 2 IF
;Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m G
;Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 Y
n n I9
<Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]iHQ
;Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
Y K9
<Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"J?
<Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]
2 2 IL
<Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m M
<Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 ^
iNQ
<Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_O=
<Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 7Pm
<Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
!RA
<Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7Qm
<Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m S
=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 d
iTQ
=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_U=
=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 7Vm
=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
!XA
=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7Wm
=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]
p ep pZ_
=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]Y+
=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}
! ]+
>Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}n\[
=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig lZ[3
=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] met() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush nif write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r oeform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
, n`[
>Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig qZ_3
>Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]p^_
>Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] ret() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush sif write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r teform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
b
>Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 va}
>Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
? d
>Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}<cw
>Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
" Q" hs1
?Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []gs7
?Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]%fI
>Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] e
>Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}
e r+V: e DK
47a1d5d0a1ad064ec478ea6d44b259972b9111eefcf4ada7bbacbbe6aaf5a0beDJ
8251d9d6d6785ae0ed2231e5acd6b3d6b86a215d008b16ed8f78ea929cfc9c4dDI
79d78fa443907f0ca28a70215cf61c47f965c37ef5ad56c02db408bdd9e238c2DH
3103d16f84c636f0c9414dff8107cf8586ae75fbcb90a3f62b7eee6412a9b821DG
1824faf3f57ad70fa29640a76cd08c71a18f5f97c91c1117929ab588f9aa44dcDF
6cdebf9c4780af0f03b80b00c611402cb25855be68d159669e31cebcae14e948DE
508911ce79f98f5eed94b7cbd546f0c6e54fe284ef02edf721f6bdeea590659cDD
3b5672f51204c1617610ae8cd9b6f52811ce9c9fa0d5d33100995554e954e356DC
843def5f9cabf23dde3a6c7cc1d52f68406f3af88c42d2d84dfe7a35cca79197DB
6ad05aacb55ec137da2b221c99a490660a5f37778642d8b590d33d5fbb093262DA
0d768d1ea1cafc2aac35e0917a8c6e9184c802e60dc7add05251d7c940193f32D@
af4cb1545cd730fee8de02f39c8201ee8909319eb1b8d4e09b97227b67b961b8D?
02d776d9eabc5a1600b998782d8d36dfd9f654699fe0d5ed0fcea97a75b44ac1
Fjs
?Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]jisc
?Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ A$ C& D( E* G, H. I/ J0 K1 L3 M5 N6 O7 P8 Q9 R; S> T? U@ VB WE XF ZG [I \K ]L _M `N aO bP cR eS fT gU hV iX jZ k] p` ub wd xh zj |k }m o q s u w x y z } ~ " % & ( + - . 0 3 4 5 7 ǁ9 ȁ: Ɂ< ʁ= ˁ? ́A B ρD ЁE сG ӁJ ԁL ՁM ցO
k+
?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]
Pm
?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol ~^l9
?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 9oo
?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow tne
?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
3 3 nq[
@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig Xp-
?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
s
@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 r}
@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
? u
@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}<tw
@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
Q Q %wI
@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] v
@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\x7
@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT
P P +yU
@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( Sz%
@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
up %}I
ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] |
ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}{
ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\~7
ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT
P P +U
ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( S %
ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p M
ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%I
ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}
ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 D
ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
( ( S%
BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p M
BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%I
BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}
BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 D
BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
% v % L
BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]
BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d
BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]
)
BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954] -
BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
% v % L
CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]
CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d &K
CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000])
CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]-
CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
x x #
CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]lW
CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T'
CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
3 ^O$ 3 lW
DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&K
DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000] 9
CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
i i #
DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T '
DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
G ^ G #
DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] 9
DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( B"
DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] !
DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 + U
DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
M M %#
ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]l$W
ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&#K
ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T&'
ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
G ^ G (#
ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] '9
ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( B+
ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] *
ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 +)U
ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
-#
FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]L,
ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T.'
FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
G ^ G 0#
FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] /9
FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( B3
FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] 2
FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 +1U
FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
L4
FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]
& & U5)
FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
7
GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 6
FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
h h L9
GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]B8
GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]
& & U:)
GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
i<Q
GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243];
GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @=
GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7?m
GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc ̅>1
GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
w w LA
HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]3@e
GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
& & UB)
HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
iDQ
HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]C
HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @E
HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7Gm
HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc ҅F1
HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
E )E _J=
HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]I3
HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3He
HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
iLQ
IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]K
IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @M
IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7Om
IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc ׅN1
IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
)E S7
IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_R=
IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]Q3
IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3Pe
IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
W W U1
JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]T
IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
<e _Y=
JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]X3
JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3We
JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]7Vm
JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc
_TH <]w
JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}\
JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338][
JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] Z7
JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]
Hd `7
KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]__=
KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]3^e
JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
( ( <cw
KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}b
KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]a
KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]
H Ke}
KJan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]3de
KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
tgg
KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]ifQ
KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
js
LJan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono is!
LJan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do clean Mh
KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
e r+V: e DX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 up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} v) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]
A A ls
LJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check Jks#
LJan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C Dns
LJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}omsm
LJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb jqsc
LJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]ps1
LJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []os7
LJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
h 5) h <tw
MRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}s
MRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]Frs
LJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
H Kv}
MJan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]3ue
MRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
txg
MRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]iwQ
MRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
-zW
MRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]My
MRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
< < K}}
NJan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681] |9
MRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]L{
MRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
tg
NRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]i~Q
NRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
-W
NRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]M
NRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
9
NRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]L
NRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
1 1
NRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f J
NRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< M
ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}?{
NRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
N L
ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}-W
ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]
1
ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f J
ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)
9
ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< < ?
{
ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
dE
ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
p ,p 7k
ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]O
ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
P
PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol ^9
PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 9o
PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow te
PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
y y 7
PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han X-
PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
fI
PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o
PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
oY
PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
q]
PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
dE
QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
o ,p o | u
QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]7 k
QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]O
QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
Y }!w
QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]B
QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}" A
QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]
?${
QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]ef@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}4#e
QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^"9
QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
X B'
RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}"&A
RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]|%u
RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]
}(w
RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]
4*e
RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^)9
RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
b,A
RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~+y
RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
% n% "/A
SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] .7
RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]-
RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens
}1w
SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]B0
SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409} bR ZRY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ فU ہY ܁] ݁` ށc ߁e g j l n q t v x z }
! $
' ( * , / 1 3 5 8 9 : ; < = ? !@ "B #D %F &I 'K (M *O +R ,T -U .W 0Y 1[ 3\ 4] 5^ 6_ 8` 9b ;c <d =e >f @g Ai Bk El Fm Gn Ho Jp Kr Ls Mt Nv Ow Py Q{ R| S} T~ U V W X
43e
SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^29
SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
b5A
SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~4y
SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
n +8 M
SRadomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919] 77
SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]6
SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
97
TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han
f:I
TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o ;
TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
o<Y
TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
q=]
TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
- - R?
TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE ^>7
TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
, , O@
TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]
' B1
TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]TA#
TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]
A A Ds
UJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check $JCs#
UJan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C DFs
UJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}oEsm
UJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb jIsc
UJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]Hs1
UJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []Gs7
UJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 K+
UAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]FJs
UJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
Ms
VJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check )^L9
UAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C DOs
VJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}oNsm
VJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb jRsc
VJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]Qs1
VJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []Ps7
VJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 T+
VAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]FSs
VJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
^U9
VAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]
w w ^W7
WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]!V?
VAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
OY
WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]RX
WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE /
? ' ? [[1
WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 2TZ#
WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
b\?
WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4]c
WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 J^
WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 J_
WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
`
WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend 7
? ' ? [b1
XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 :Ta#
XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
bc?
XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4dc
XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 Je
XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 Jf
XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
g
XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend ?
K K /iY
XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|hs
XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
` H` [k1
YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 D3ja
XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
e r+V: e De
40b62a1609bf1e6b7221ee088dfbf97f47ad76f2533474c46260a24ca3439cdfDd
89508e57764f6439d8043a9ae25c798163d3dc7e1ea5019bab2063d6eaafb9c3Dc
b38f765f577317761aaaf492c0a93c317974aef18e4e53fea2895acb530ec50eDb
3198edac074ce72829e22b3fc0c16b2361413759b0418cd6443a6a5394eaf84aDa
394db1fa5c7f0d2612ba1c758328abe415aa0a5677f936aeeb8f95543e5c4110D`
e107c061dd44f2966524c0a39c675a112e3f712a7f1b891c19bc27ddadc6d91bD_
5ff60c9fc8d59e0004f0a615c0b3b023014fe0ba062442fdf0449dd359e754b9D^
a9a7c7111b8132043c9c9351bdd7bf34051ae1eb9ab0c90e8e7582ca543c49d6D]
6ec6b4d2ab3c7cf65dceaadd6a13d91e6ca7e48b3d6bf5712f0c0bf3639015b0D\
3ce3178d47c0937ca4073ad24a4d21e17880a93c83bed7d7cdde515bda87c789D[
53ebea1b387c7333eb49334b5bf8e867d5307742f502d7d40091abe8eb42387bDZ
b3587c7ba2e0d12bead8a84ad8d8aad31b6a2da64b0de946850e55afd3787193DY
cb86f1399947fbb9131708d22997718ff926c00d9e0cdfa9ce37811fe7e47e4d ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
bl?
YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4mc
YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 Jn
YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 Jo
YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
p
YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend I
K K /rY
YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|qs
YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 3sa
YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
A A :to
YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
K K /vY
ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|us
ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 3wa
ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
4 A 4 y
ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli):xo
ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
/ / {
ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]@z{
ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)
= = >|w
ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
}#
ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . M~
ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]
t t
[Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]
= = > w
[Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
#
[Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . M
[Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+ '
[Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}H
[Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP Y
S z S "?
[Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]}
[Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
, , -
[Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]1]
[Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+
'
\Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}H
\Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP ]
S z S " ?
\Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] }
\Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
1
]
\Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
\Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
\Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2_
\Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]'
\Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ }
]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] 9
\Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
"?
]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]
1]
]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2_
]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]'
]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ 9
]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"?
]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 9
]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
^Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
^Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2 _
^Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499] '
^Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ #9
^Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]""?
^Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] !9
^Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
2 2 I$
^Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m %
^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 p
n n '9
_Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]i&Q
^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
Y )9
_Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"(?
_Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]
2 2 I*
_Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m +
_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 u
i,Q
_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_-=
_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 7.m
_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
!0A
_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7/m
_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m 1
`Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 {
i2Q
`Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_3=
`Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 74m
`Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
!6A
`Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]75m
`Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]
p ep p8_
`Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]7+
`Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}
! ;+
aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}n:[
`Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig Z93
`Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
, n>[
aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig Z=3
aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]p<_
aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
@
aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 ?}
aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
? B
aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}<Aw
aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
" Q" Fs1
bJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []Es7
bJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]%DI
aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] C
aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}
FHs
bJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]jGsc
bJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]
I+
bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]
PK
bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol ^J9
bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] bR RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ [ \ ^
_ `
a b c d e f g h i j k l m n# o$ q% r' s) t* v+ w, x- y. z0 |1 }2 ~3 4 6 8 ; > @ B F H I K M O Q S U V W X [ \ ] ^ a b c f g i l n r t u y z { } ā Ł Ɓ ́ ρ Ё ց ׁ ށ ߁ " # % ( * + - 1 3 d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 9Mo
bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow tLe
bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
3 3 nO[
cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig XN-
bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
Q
cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 P}
cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
? S
cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}<Rw
cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
Q Q %UI
cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] T
cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\V7
cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT
P P +WU
cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( SX%
cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
up %[I
dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] Z
dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}Y
dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\\7
dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT
P P +]U
dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( S^%
dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p Ma
dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%`I
dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}_
dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 Db
dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
( ( Sc%
eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p Mf
eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%eI
eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}d
eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 Dg
eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
% v % Li
eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]h
eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d
l
eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]k)
eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]j-
eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
e r+V: e Dr
b59e577acfd79936a81667c77131d1327e4ad70bde597f697884a4eaf7e3a7ecDq
54ccdc7cf35a5a397da2776db1e3698403ddd8b7aaa89e9bd1156f4f0b376933Dp
5c3bcfc599ddd884790cbf5e2d8043339f4cd5b91ad9595afa0db6b779424c22Do
fd72ad4e19f26b5ab55c6b53a5824234f78c29cf3c20aca13156acea64a3346cDn
3598b7d61bba2f202c95efea45958f70f97c86c499e19042f49589dccbf233ceDm
f53cc1052d30f24f16353f3b8289baea8f6b5784241e361ca528cc3a0eaa3777Dl
76facf50f1b80b009a8db32a440b75f305a0ebb492bfd12472396c89645ad637Dk
b32b8584f13412301461463bde85e0fdc2dde858c115cd5ff1e7c299096a8d77Dj
88ec95b43c8491db9c18162f1e7fba8a23bdd4c936af58ebbc5e3ca5294bfb53Di
262dbb7f2a09156ec1388f48b84cdfae97e0c8a8a47a0eabf39d4db7348d2f88Dh
85883036219c6afb70af3efeedd40855b4513b05e5a5134abc56c4b95841a125Dg
6858b0825e7c10d48e4a834df4baf94b38ae7f99b036340669e3abf74bdfc689Df
57519dda2c881614316fc810027c0c66b31bab6e5e16dcd0d91cf84b6d63fc3a
% v % Ln
fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]m
fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d &rK
fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
q
fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]p)
fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]o-
fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
x x t#
fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]lsW
fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
Tu'
fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
3 ^O$ 3 lyW
gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&xK
gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
w
gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000] v9
fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
i i z#
gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T{'
gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
G ^ G }#
gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] |9
gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( B
gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]
gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 +~U
gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
M M #
hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]lW
hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&K
hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T'
hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
G ^ G #
hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] 9
hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( B
hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]
hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ǁ+U
hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
#
iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]L
hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T '
iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
G ^ G #
iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]
9
iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( B
iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]
iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 с+U
iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
L
iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]
& & U)
iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ل
iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
h h L
jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]B
jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]
& & U)
jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
iQ
jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]
jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @
jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7 m
jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc 1
jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
w w L
kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]3 e
jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
& & U )
kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
i"Q
kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]!
kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @#
kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7%m
kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc $1
kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
E )E _(=
kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]'3
kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3&e
kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
i*Q
lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243])
lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @+
lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7-m
lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc ,1
lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
)E 17
lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_0=
lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]/3
lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3.e
lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
W W 31
mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]2
lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
<e _7=
mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]63
mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}35e
mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]74m
mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc
_TH <;w
mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}:
mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]9
mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] 87
mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]
Hd >7
nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_==
nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]3<e
mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
( ( <Aw
nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}@
nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]?
nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]
H KC}
nJan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]3Be
nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
tEg
nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]iDQ
nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
Hs
oJan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono Gs!
oJan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do clean MF
nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} v) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]
A A Js
oJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check JIs#
oJan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C DLs
oJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}oKsm
oJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb jOsc
oJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]Ns1
oJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []Ms7
oJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
h 5) h <Rw
pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}Q
pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]FPs
oJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
H KT}
pJan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]3Se
pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
tVg
pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]iUQ
pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
-XW
pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]MW
pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
< < K[}
qJan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681] Z9
pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]LY
pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
t]g
qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]i\Q
qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
-_W
qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]M^
qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
a9
qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]L`
qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
1 c1
qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f Jb
qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< Me
rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}?d{
qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
N Lg
rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}-fW
rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]
j1
rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f Ji
rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) h9
rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< < ?k{
rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
dlE
rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
p ,p 7nk
rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]Om
rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
e r+V: e D
7c45ba29959e72ceece7bd3f48bcc0ce0a86ebce4677a50e9d95a46e172b5d3bD~
c3571b20ed80af5bcdad26c4ffded5902a413e69a9f36e66ea22eb7f0b7343beD}
73ae0d5fb6285b4b0077f98e47a68f4b9fece79c2d81f4ee0718940d27177616D|
56c9932aa2318a64e391b3f64c794e77737aeacd923b2b7d8e02b450cd58abd2D{
540ad2675ab792c4e347811b9c59c9dfa46be5932ed582b6b0748c7a27660973Dz
34255ef50bd9c16239a9a579c23a1bc1f046428a2aecf0fb06e04340b46af985Dy
5f9ffa10d0718dbd468c695dee255d77d9ba1a9b0d1b7e44a156806dcdca67a1Dx
d9305a12e977c57f2881d0d6b5d0a5c612d311bf062b22798ff09ce88469752cDw
4f125e807f2d9654af85653665201a2fb6833421172f030513ae09616ba3f069Dv
a3ef423198831cced03969fcb478cb2a5ee78ec107a8600aa98854d428fa7a96Du
c560870127d4c5652e42c74ffbb3cf96a864ca994702fffd84bfe5a6b5275464Dt
d4ce276deccf36c3cdff38a52ff6f73bd2c271d8df45463c61cc66cdd8dd7e18Ds
c91dc3bbc7593fb7442fa9ec947f30d95bad094d5b4180e4669380d535253bb7
Pp
sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol ^o9
sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 9ro
sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow tqe
sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
y y t7
sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han Xs-
sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
fuI
sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o v
sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
owY
sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
qx]
sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
dyE
tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
o ,p o ||u
tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]7{k
tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]Oz
tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
Y }w
tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]B~
tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}"}A
tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]
?{
tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]ef@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}4e
tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^ 9
tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
X B
uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}"A
uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]|u
uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]
}w
uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]
4e
uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^9
uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
b
A
uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~ y
uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
% n% "
A
vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] 7
uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]
uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens (
}w
vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]B
vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}
4e
vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^9
vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
bA
vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~y
vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] bR rRY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ ; > A C E H J L O R T V X [ ] _
a c
e g j k l n p r t u v w x y !| " # $ % & '
)
* + , / 1 2 3 4 5 6 8 9 :" <$ =' >) ?+ A- B0 C2 D3 E5 G7 H9 J: K; L< M= O> P@ RA SB TC UD WE XG YI [J \K ]L ^M `N aP bQ cR dT eU fW gY hZ i[ j\ k] l^ m_ n` pb qd ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
n + M
vRadomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919] 7
vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]
vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens . dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
7
wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han 0
fI
wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o
wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
oY
wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
q]
wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
- - R
wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE 7^ 7
wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
, , O
wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]
' 1
wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]T #
wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]
A A "s
xJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check ;J!s#
xJan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C D$s
xJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}o#sm
xJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb j'sc
xJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]&s1
xJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []%s7
xJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 )+
xAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]F(s
xJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
+s
yJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check @^*9
xAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C D-s
yJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}o,sm
yJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb j0sc
yJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]/s1
yJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) [].s7
yJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 2+
yAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]F1s
yJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
^39
yAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]
w w ^57
zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]!4?
yAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
O7
zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]R6
zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE F
? ' ? [91
zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 IT8#
zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
b:?
zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4;c
zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 J<
zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 J=
zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
>
zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend N
? ' ? [@1
{Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 QT?#
{Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
bA?
{Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4Bc
{Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 JC
{Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 JD
{Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
E
{Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend V
K K /GY
{Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|Fs
{Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
` H` [I1
|Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 Z3Ha
{Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele) ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
bJ?
|Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4Kc
|Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 JL
|Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 JM
|Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
N
|Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend _
K K /PY
|Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|Os
|Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 3Qa
|Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
A A :Ro
|Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
K K /TY
}Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|Ss
}Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 3Ua
}Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
4 A 4 W
}Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli):Vo
}Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
/ / Y
}Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]@X{
}Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)
= = >Zw
}Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
[#
}Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . M\
}Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]
t t ]
~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]
= = >^w
~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
_#
~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . M`
~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+ b'
~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}Ha
~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP o
S z S "d?
~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]c}
~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
, , f-
~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]1e]
~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+ h'
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}Hg
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP s
S z S "j?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]i}
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
1k]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
l
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
m
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2o_
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]n'
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ q}
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] p9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
e r+V: e D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"r?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]
1s]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
t
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
u
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2w_
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]v'
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ z9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"y?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] x9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
{
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
|
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2~_
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]}'
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ 9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]" ?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
2 2 I
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348
n n 9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]iQ
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
Y 9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]
2 2 I
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348
i
Q
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_ =
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 7 m
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
!A
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7
m
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348
iQ
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_=
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 7m
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
!A
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7m
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]
p ep p_
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]+
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}
! +
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}n[
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig Z3
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
, n [
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig Z3
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]p_
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 }
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
?
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}< w
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
" Q" $s1
Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []#s7
Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]%"I
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] !
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}
F&s
Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]j%sc
Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]
'+
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]
P)
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol ^(9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 9+o
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow t*e
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
3 3 n-[
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig X,-
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} bR ! RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ th uj vk wl xm yo zq |r }s ~t u w z { | ~
$ & ' ) + - / 1 3 4 5 6 9 : ; < ? @ ÁA āD ŁE ƁG ǁJ ȁL ɁP ʁR ́S ́W X ЁY с[ ҁ^ a ځb ہd ܁g i j l o p q s u v x y { } ~ ! ! ! ! ! ! ! !
et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
/
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 .}
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
? 1
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}<0w
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
Q Q %3I
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] 2
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\47
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT
P P +5U
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( S6%
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
up %9I
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609] 8
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\:7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT
P P +;U
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( S<%
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p M?
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%>I
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}=
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 D@
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
( ( SA%
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p MD
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%CI
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}B
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 DE
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
% v % LG
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]F
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d
J
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]I)
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]H-
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
% v % LL
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]K
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d &PK
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
O
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]N)
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]M-
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
x x R#
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]lQW
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
TS'
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
3 ^O$ 3 lWW
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&VK
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
U
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000] T9
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
i i X#
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
TY'
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
G ^ G [#
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] Z9
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( B^
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] ]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 Ӂ+\U
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
M M a#
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]l`W
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&_K
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
Tb'
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
G ^ G d#
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] c9
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( Bg
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] f
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ݁+eU
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
i#
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]Lh
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
Tj'
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for
G ^ G l#
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] k9
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( Bo
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] n
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 +mU
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
Lp
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]
& & Uq)
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
s
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 r
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
e r+V: e D
6a5cc17610dacd423285c7b8f0036b7cdcfbc9fb0e513eca14b1d7d5ea047f7fD
07bd35c3abbf6026fb0e99d204b230ccbed3b91ccbed6d0675f5dc885931ea62D
bee03f8565ac02484c05292876b9c0976e9334dad12bbf643dd9f59526e9eb6dD
97ca74d50cef86200eaedf11cbb46855b4d2c943de9de770a9b024fbbf90ce3dD
b1471a49f356e514174b94e92dfc8993323e25a2de938cda266f9cd7d5850665D
8359e9ef711ab7df3dd2ff2d776303381cb9569b28010fc635d1dc38c63d0a3cD
70b9436a659665181aa90524926ff7ebeebcbc15038624b5a49e0657dedfb584D
61f3ebaaeea6b7aa7f2cb2e4e49d7030e15a0242954617931c4ca2d74e49c807D
9d5c67e50f13bee074d4860c206d81b8461ec0b7593a7cf3b207abe9f1e6f815D
a6114fbcf7f5bf08c4c84d6d0e2551e1175af5cd5b08fe5fa1557b575e292d02D
36f13b26a3b985a2d5e41a86724a23f3387adf18ce34902378ed32345f865d1aD
ff0af5a6e3acbbdec8607cb8aa6f258edbb87c22d9e2e162b476d366c16a6372D
64f15baadb874e4dcc756fc50e0f361c704a78fb0c5c3e1dee25e51bd7bc0347 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
h h Lu
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]Bt
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]
& & Uv)
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
ixQ
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]w
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @y
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7{m
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc z1
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
w w L}
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]3|e
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
& & U~)
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
i Q
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7m
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc ! 1
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
E )E _=
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]3
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3e
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
iQ
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7 m
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc !
1
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
)E 7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_=
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]
3
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3 e
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
W W 1
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
<e _=
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]3
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3e
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]7m
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc !
_TH <w
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] 7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]
Hd 7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_=
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]3e
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
( ( < w
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]
H K!}
Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]3 e
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
t#g
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]i"Q
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] !
&s
Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono ! %s!
Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do clean !M$
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} !v) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]
A A (s
Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check !J's#
Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C D*s
Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}o)sm
Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb j-sc
Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840],s1
Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []+s7
Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
h 5) h <0w
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}/
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]F.s
Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
H K2}
Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]31e
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
t4g
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]i3Q
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] !
-6W
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]M5
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
< < K9}
Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681] 89
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]L7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
t;g
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]i:Q
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] !
-=W
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]M<
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}
?9
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]L>
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}
1 A1
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f !#J@
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< MC
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}?B{
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
N LE
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}-DW
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]
H1
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k- CI: Remove unused kpet_tree_f !'JG
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) F9
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]
< < ?I{
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
dJE
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
p ,p 7Lk
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]OK
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
PN
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol !,^M9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 9Po
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow !/tOe
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command !- erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
y y R7
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han !1XQ-
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
fSI
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o T
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
oUY
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
qV]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
dWE
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]
o ,p o |Zu
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]7Yk
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]OX
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}
Y }]w
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]B\
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}"[A
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]
?`{
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]ef@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}4_e
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^^9
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
X Bc
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}"bA
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]|au
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]
}dw
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]
4fe
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^e9
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
bhA
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~gy
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
% n% "kA
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] j7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]i
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens !>
}mw
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]Bl
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]eM@- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}
4oe
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}^n9
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
bqA
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]eq- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]~py
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}
n +t M
Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919] s7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]r
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f
- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ens !C
e r+V: e D&
48050d32a9ddb2c79d03c638c04cd306724f7ac310231a77812108d47d170a94D%
995f1138e1de2ec2b063d80c34f72c7c9580839633287baad40f5b5b23f9e258D$
6e241bf0dc50bd058f110b48194543b466e895d9ce51ae777aa7f7d34f994e08D#
02cbd7332b3ce796fb31c211ff00e807700217dbe4cbf3860f61c4a3bb69beb8D"
69c2b3156d7f7348e92c9b6d94a15da2b8f77e0597041944eb9741c941e07001D!
d0f3c1d37d812e6fbf2b4e853fb66fd0ffe2a908b0bd0749ea1f99b53198ad71D
349059abdcb4206de241619b0a997e70897934335a8863a2070dccf45c49f019D
08d3a3571d95f12d505af7454de2dadabca497aa265dbce4ff86b0317462b5dbD
44904175313b13552ac962d42d456dc5d52bface994ef485f56c33f7f6971440D
6a47e214a36fc58ad9b00ab50073240c79076c8bd04a01dd01029f8ca43122bdD
9c1793d4db51f7f371d7e73208f169004d3aba5ed38b51d28f55cdcc8cb7f3c0D
84b8b611d8300bcaa1b8a5f55f2a12f6469df74e32e649b9b505e76925339810D
3b37792998533e55b2ebe20d10052f6104ae209a5db1a84826bfde614e6d7c44 dle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}
u7
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Han !F bR !RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ ! !
! !# !& !( !* !- !0 !2 !4 ! 6 ! 9 ! ; ! = !!? !"A !$C !%E !&H !(I !)J !*L !+N !.P !0R !2S !3T !4U !5V !6W !7Z !8] !9` !:c !;d !<f !=h !?k !@m !Ao !Bq !Dt !Gu !Iv !Jw !Kx !Ly !M{ !O| !P~ !Q !S !T !U !V !X !Y !Z ![ !\ !^ !_ !a !b !c !d !f !g !i !j !k! !l" !n# !o% !p' !r( !s) !t* !u+ !w, !x. !y/ !z0 !{2 !|3 !}5 !~7 !8 !9 !: !; !< != !> !@ !B !D !F
fvI
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]
o o w
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_i- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}
oxY
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]
qy]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]
- - R{
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE !N^z7
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
, , O|
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]
' ~1
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]T}#
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]
A A s
Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check !RJs#
Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C Ds
Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}osm
Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb jsc
Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]s1
Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []s7
Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 +
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]Fs
Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
s
Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check !W^9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C D s
Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}o
sm
Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb jsc
Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]
s1
Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) [] s7
Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 +
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]Fs
Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
^9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]
w w ^7
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]!?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}
O
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]R
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_S- [s390] zcrypt: Fix ZCRYPT_PE !]
? ' ? [1
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 !`T#
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
b?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4c
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 J
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 J
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend !e
? ' ? [ 1
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 !hT #
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_=- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
b ?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4 c
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 J!
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 J"
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
#
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend !m
K K /%Y
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|$s
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
` H` ['1
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797 !q3&a
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele) ]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
b(?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
4)c
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
1 1 J*
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
1 1 J+
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
,
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend !v
K K /.Y
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|-s
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 3/a
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
A A :0o
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
K K /2Y
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]|1s
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]
H H 33a
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)
4 A 4 5
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli):4o
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]
/ / 7
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]@6{
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)
= = >8w
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
9#
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . M:
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]
t t ;
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]
= = ><w
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]
=#
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}
. . M>
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+ @'
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}H?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP !
S z S "B?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]A}
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
, , D-
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]1C]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]
+ F'
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`9@- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}HE
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP !
S z S "H?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]G}
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]
1I]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
J
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
K
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2M_
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]L'
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ O}
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] N9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
"P?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]` @- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]
1Q]
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)
R
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
S
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2U_
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]T'
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ X9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"W?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] V9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
Y
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]
Z
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`]- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]
. . 2\_
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a - redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]['
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]
\ _9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"^?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] ]9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]
2 2 I`
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m a
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 !
n n c9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]ibQ
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
Y e9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]"d?
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]
2 2 If
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m g
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 !
ihQ
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_i=
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 7jm
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
!lA
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7km
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}
m m m
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 !
inQ
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]
_o=
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]
D D 7pm
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
!rA
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]ab- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]7qm
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]ay- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]
p ep pt_
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]s+
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}
! w+
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}nv[
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig !Zu3
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] !et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush !if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r !eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
e r+V: e D3
c09c4232be25f378a871198874931161c40b1ce864dffbd95137c1d37205669cD2
2b66b267a753255256f090bf87977338168b89d26c4ffd982c87cd2f91b93577D1
f7211e59a025b27356cfb06417188c0dd5e275b865c332da16611d69cbc3addbD0
256f88bd5667a9d5534690123098dcb92c0e72a1a20c14cfc7fc6f93d1c33891D/
94a821399c6834a9613024e8e79095fed47945651c6f3043fb698f645b47ea98D.
46160c3e8468e10ca76482b787522ad64e1f769900fb6947b4bc6690893303cbD-
b3e690b11cafa64b176ad1733771549c822362e0515190949a20dd95d397be58D,
3c1b09a234b987d0d6b7eeda50bfd65fdd56ba1cd18a3d7bfaf6c502e6a18295D+
ba86ad50d0caa853696fbf8bb669856b215fcf866bddf9a40a79e2097b6bdac7D*
b045612fcdf478362a31afe42cbcbfa3696fd627cd7125c30615831a7f9c7831D)
ba701cb5769f4b33298d989a3a2f322062b88774a949cc71f4d59c46e785f253D(
7359842aed62ed18b7e387856697f0a6cf8b16b27c7c68064ba6567b32c76b6bD'
b96b6f75231c9bd50c073462605d9aa5494f79623d07db42df2d505c858be737
, nz[
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig !Zy3
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]px_
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] !et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush !if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r !eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
|
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 !{}
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
? ~
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}<}w
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}
" Q" s1
Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []s7
Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]% I
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}
Fs
Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]jsc
Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]
+
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]
P
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~- [net] net-sysfs: Call dev_hol !^9
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]
9 9 9 o
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_9- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] pow !ĉte
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{
- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command ! erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]
3 3 n [
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a*@- fuse: fix live lock in fuse_ig !ƄX
-
Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_"- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} !et() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush !if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error r !eform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234]
b |b
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 !˂ }
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}
?
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}<w
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} bR "$RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ !I !J !K !M !O !P !Q !R !S !U !X !Y !Z !\ !_ !` !a !c !e !f !g !h !i !j !l !m !n !o !p !r !t !w !z !| !~ ! ! ! ! !Á !Ł !ʁ
!́ ! !Ё !с !ҁ !Ӂ !Ձ !ց !ׁ ! !ف !ځ !ہ" !܁# !݁% !ށ( !߁* !. !0 !1 !5 !6 !7 !9 !< !? !@ !B !E !G !H !J !M "N "O "Q " S " T "
V "W "Y "[ "\ "^ "_ "a "d "f "g "i " m " o " s " w "!z "#}
Q Q %I
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT !
P P +U
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( S%
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
up %I
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b @- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]ar@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}
\7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT !
P P +U
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]
( ( S%
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p M
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]% I
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 D
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
( ( S %
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; - cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)
p B p M"
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV@- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]%!I
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]
7 7 D#
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
% v % L%
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]$
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d
(
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]')
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]&-
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
% v % L*
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]bk- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408])
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]
d &.K
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
-
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000],)
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]bx@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]+-
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]
x x 0#
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]l/W
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T1'
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for !
3 ^O$ 3 l5W
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&4K
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
3
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000] 29
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
i i 6#
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T7'
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for !
G ^ G 9#
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] 89
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( B<
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] ;
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 !+:U
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} ! CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV !E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 !CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 !] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
M M ?#
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]l>W
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]&=K
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
T@'
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for !
G ^ G B#
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] A9
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( BE
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] D
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 !+CU
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} ! CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV !E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 !CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 !] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
G#
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]LF
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
TH'
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for !
G ^ G J#
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147] I9
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
P( BM
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] L
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 !+KU
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} ! CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV " E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 "CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 "] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
LN
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]
& & UO)
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
Q
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 "P
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} " CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV "E-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 " CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227 "
] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
h h LS
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]BR
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]
& & UT)
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
iVQ
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]U
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @W
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7Ym
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc "X1
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
w w L[
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]3Ze
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
& & U\)
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]
i^Q
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]]
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @_
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7am
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc "`1
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
E )E _d=
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]c3
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3be
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
ifQ
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c@- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]e
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]cR@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}
; ; @g
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c0- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
b 7im
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc "h1
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
)E m7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_l=
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]k3
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3je
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
W W o1
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]n
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
<e _s=
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]r3
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]cU@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}3qe
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]7pm
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c1- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitc "
_TH <ww
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}v
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]u
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] t7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]
Hd z7
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]_y=
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]3xe
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
e r+V: e D@
1e71ddbce6e19382bbeabad1c266e4c7cb09e2a56d99175af4ac9ac047af3945D?
20135be9052bd1b2d8da133fe7cc987b80d4dc2685146012968f6b8e78e0bfe9D>
9bfce694395b42428b130fade4131953efe8248a166cb9df74a2681d8de08ecbD=
49aab94d53d2b184f6a56304123436d4e5036e2f12df6e2e89bef3f8e09e48c5D<
f08e9ea6985102fff682040f9282a64d08ae60b52a53ac25a2ae2d14b381049eD;
3594f2b7367495aba0e2ad40d7aeabb3ec7bcd176bfa09127a9021573f936f66D:
93e83a7482939b72a1377200f3ba36de2f5a593ed72db969095bca9b712022f4D9
b46ce984b02b31bec731f80328c745600ec4e07a5c031e77dbb554e88ba7fcbbD8
e855f087b1b23b7efc6503e87350c4cca1ef6881dc97c31f1512bcda747a478bD7
4de0f5c0f1ddd055c4b4b2635e35081b0a75f314bbe5cb8978790bfc21cebbc8D6
44c119ffc1f4001f24a6905dc7a8b1db1b192babbc6e3390b81e54adfb63b7b8D5
e161fe668a338dbcc5fd4207138cf06b234756554c7b000fd5627366c98b5f3aD4
738ba060f72edaaec140a48f940f7fdf573a9f888afd244b937e86cefba2f1ca
( ( <}w
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}|
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]{
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]
H K}
Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]3~e
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]
tg
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]i Q
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]dg- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] "%
s
Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono ") s!
Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do clean "(M
Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} "*v) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]
A A s
Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^@- [fs] gfs2: move privileged user check ",Js#
Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^4- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]
C C Ds
Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}osm
Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]
b gb j sc
Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]
s1
Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) [] s7
Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]
5 }i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r
@- mkdumprd: Use DUMP_TARGET which printing error message during sshti
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-44^f/- module-setup: Ensure eth devices get IP address for VLAN0
iy
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-43]@- module-setup: re-fix 99kdumpbase network dependency
- kdumpctl: bail out immediately if host key verification failedF s
Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]
a ~i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^- Add a new option 'rd.znet_ifname' in order to use it in udev ruleswi
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().,iq
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^_- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias() iQ
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|@- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.iM
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel
t{; ,iq
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^_- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias() iQ
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|@- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.iM
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel}i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r
@- mkdumprd: Use DUMP_TARGET which printing error message during sshti
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-44^f/- module-setup: Ensure eth devices get IP address for VLANm#
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V - makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working
V { ~v V "iM
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel}!i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r
@- mkdumprd: Use DUMP_TARGET which printing error message during sshx a
Pingfan Liu <piliu@redhat.com> 2.0.15-51.2`B @- kdumpctl: fix a variable expansion in check_fence_kdump_config() m#
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V - makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working~ i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().
$ _), $ x)a
Pingfan Liu <piliu@redhat.com> 2.0.15-51.2`B @- kdumpctl: fix a variable expansion in check_fence_kdump_config()(m#
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V - makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working~'i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw&i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel %i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().,$iq
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^_- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias() #iQ
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|@- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.
cC /iQ
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|@- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems..iM
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel}-i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r
@- mkdumprd: Use DUMP_TARGET which printing error message during ssht,i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-44^f/- module-setup: Ensure eth devices get IP address for VLAN0+iy
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-43]@- module-setup: re-fix 99kdumpbase network dependency
- kdumpctl: bail out immediately if host key verification failedl*a{
Pingfan Liu <piliu@redhat.com> 2.0.15-51.3`e@- Throttle kdump reload request triggered by udev event
H OOA H }6i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r
@- mkdumprd: Use DUMP_TARGET which printing error message during ssht5i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-44^f/- module-setup: Ensure eth devices get IP address for VLAN4m#
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V - makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working~3i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw2i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel 1i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().,0iq
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^_- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()
a ~<i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw;i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel :i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().,9iq
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^_- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias() 8iQ
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|@- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.7iM
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel
tw7 ,Biq
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^_- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias() AiQ
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|@- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.@iM
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel}?i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r
@- mkdumprd: Use DUMP_TARGET which printing error message during sshx>a
Pingfan Liu <piliu@redhat.com> 2.0.15-51.2`B @- kdumpctl: fix a variable expansion in check_fence_kdump_config()=m#
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V - makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working
Q { ~v Q 0Iiy
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-43]@- module-setup: re-fix 99kdumpbase network dependency
- kdumpctl: bail out immediately if host key verification failedlHa{
Pingfan Liu <piliu@redhat.com> 2.0.15-51.3`e@- Throttle kdump reload request triggered by udev eventxGa
Pingfan Liu <piliu@redhat.com> 2.0.15-51.2`B @- kdumpctl: fix a variable expansion in check_fence_kdump_config()Fm#
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V - makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working~Ei
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^- Add a new option 'rd.znet_ifname' in order to use it in udev ruleswDi
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel Ci
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().
h wPi
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel Oi
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().,Niq
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^_- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias() MiQ
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|@- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.LiM
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel}Ki
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r
@- mkdumprd: Use DUMP_TARGET which printing error message during sshtJi
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-44^f/- module-setup: Ensure eth devices get IP address for VLAN
~zZ ViQ
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|@- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.UiM
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel}Ti
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r
@- mkdumprd: Use DUMP_TARGET which printing error message during sshtSi
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-44^f/- module-setup: Ensure eth devices get IP address for VLANRm#
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V - makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working~Qi
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^- Add a new option 'rd.znet_ifname' in order to use it in udev rules
D OOA D }]i
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r
@- mkdumprd: Use DUMP_TARGET which printing error message during sshx\a
Pingfan Liu <piliu@redhat.com> 2.0.15-51.2`B @- kdumpctl: fix a variable expansion in check_fence_kdump_config()[m#
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V - makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working~Zi
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^- Add a new option 'rd.znet_ifname' in order to use it in udev ruleswYi
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel Xi
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().,Wiq
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^_- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()
a ~ci
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^- Add a new option 'rd.znet_ifname' in order to use it in udev ruleswbi
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel ai
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().,`iq
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^_- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias() _iQ
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|@- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.^iM
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel
t&F igA
Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002[hgQ
Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603^ggY
Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129lfa{
Pingfan Liu <piliu@redhat.com> 2.0.15-51.3`e@- Throttle kdump reload request triggered by udev eventxea
Pingfan Liu <piliu@redhat.com> 2.0.15-51.2`B @- kdumpctl: fix a variable expansion in check_fence_kdump_config()dm#
Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V - makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working
^ 0 W ^ tni
Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048-mis
Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762liO
Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560ki
Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560Kji/
Jan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441
; m ; Kti/
Jan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441sgA
Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002[rgQ
Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603^qgY
Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129pi
Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159oi5
Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401
y'. yi5
Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401txi
Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048-wis
Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762viO
Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560ui
Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560
G x6 G i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560K~i/
Jan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441}gA
Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002[|gQ
Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603^{gY
Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129zi
Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159
e r+V: e DM
6f455484f1eb5f3b6fb66db239a002b80058c5b1b96396b1f9845be413af51dfDL
f136bc0eecf5d5320db54998eac1c4599ab87a312d5ce7a2cefc841ab054b1eaDK
7bddd4fb53bfa9c6ecfb51584e6173525154d1432fdd23c18162b8a5428fd9c2DJ
ebe9101eafa195e97d5191257396d826d54a03212851b56130c2502068cb8f4cDI
0e46815b96448a8115c16703aeaeadf07680cb2172f0028f3a8ab4b9d6e6897dDH
1e050a70197e546f07c1f78ed2e33fa01d93756947ab17d6c3343eaf08eb2702DG
14290884418bd83ad4955aa6354b2113950b766239244a06bee2f2a364ba608fDF
f901d903838a840af4b07b7405171f08944a919391efff75f782b9d2c5a6a8a7DE
ca22627ed1921f923bf0d6590573bb115ae89ab16f2cd8439ca78680ac859464DD
3db947e6e862b89a0ca5b23880b8c910b68d3c16831d17f914d62706e4e337dbDC
f6eec5c1e694fd7e8232482c537de9cd0baf38de7afc7c99fee2ddf4b248488dDB
8d2234f4b3652ffa6caf553d843f040d43d53c10ec6156b8de9fbd3efb4aef2cDA
6a2fc5bcfdf2c8ed011976da11bfa2c4e64084e1f45d265f784bcd58fbece989
8 `" 8 ^gY
Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159i5
Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401ti
Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048-is
Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762 iO
Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560
1
iO
Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560 i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560Ki/
Jan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441gA
Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002[gQ
Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603
NU: ^gY
Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159
i5
Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401t i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048- is
Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762
1 iO
Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560Ki/
Jan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441gA
Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002[gQ
Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603
NU: ^gY
Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159i5
Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401ti
Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048-is
Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762
1 iO
Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560 i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560K i/
Jan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441gA
Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002[gQ
Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603
NU: #qK
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d- Modify 0250-RHBZ-1610867-rescan-change.patch
* Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651"i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159!i5
Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401t i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048- is
Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762
c %q'
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556$qA
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651
L L /&qo
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
O 0)qq
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066(q}
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855q'qs
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
+> -qA
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651},q
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901h+qa
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197P*q1
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
p p .q'
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
L L //qo
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
O 02qq
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #171450661q}
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855q0qs
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
" +>" 6q=
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}5q
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901h4qa
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197P3q1
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
p p 7q'
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
L L /8qo
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
O 0;qq
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066:q}
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855q9qs
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
+>" |Am
Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>- Update man pages to reference kerberos(7)
- Resolves: #1704726@q
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905?q=
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}>q
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901h=qa
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197P<q1
Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420 bR "RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ "& "' "+ "- ". "/ "0 "1 "2" "3) "4/ "56 "6< "7B "8I "9P ":V ";] "<c "=i ">n "?t "@y "A "C "D
"E "F "G "H "I# "J% "K& "L) "M- "N. "O/ "P2 "Q6 "R7 "S8 "T; "UA "WH "XO "YV "Z] "[d "\k "]r "^y "_ "a "b "c "d "e# "f* "g1 "h8 "i? "jF "kM "lT "m[ "nb "oi "pp "qw "r~ "t "u "v "w "x! "y( "z/ "{6 "|= "}D "~K "R "Y "` "g "n "u "| " " " " " " "% "* "/ "4
v
Hm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492Gm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289oFmu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126eEma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|Dm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506Cm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347|Bm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927
}xn eOma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|Nm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506Mm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347|Lm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927|Km
Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>- Update man pages to reference kerberos(7)
- Resolves: #1704726 Jm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492Im
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492
r | r Vm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347|Um
Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927 Tm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492Sm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492Rm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492Qm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289oPmu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126
]m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492\m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492[m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492Zm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289oYmu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126eXma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|Wm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506
{ g]t { dm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289ocmu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126ebma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|am
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506`m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347|_m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927^m=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599
}u\ okmu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126ejma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|im
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506hm=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 gm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492fm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492em
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492
9 ztV 9 ri
Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163qi;
Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319pm=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 om
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492nm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492mm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492lm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289
ym
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492xm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492wm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492vm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289oumu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126etma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|sm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506
e gJn e m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289o~mu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126e}ma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|i
Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163{i;
Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319zm=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599
e r+V: e DZ
79effda42d229dffeed9ec2dc1067ea15c3d1895c9bdfe9d24064abaa134d7a7DY
82f169e42c36e9579026a6d56d46f2cbe59221a611192fe96b613ff527e57a1cDX
8c1afba082bedaba9392d11b613759a65431711c73e71af2ca4c1d2710b71ac5DW
0b514834510f57ab09a2051d0b0c2be8a61777452ad125d1b3e5e90abeb6fa22DV
f7291bdf6020187d7cf5369c95f16faeef861f866ffc8c46c03116ea2adf9092DU
617fff79ce97ec5ee66c7f45cec546ea2429f9ce776263cf40a0b246665913e1DT
cf61322c3e87c6c21ad8be1051fa2d235337e2a97a9a894828a70e5cd12a2254DS
03cf1dde125c19d5d48038e69f3552a4973548aa09dc383debd850eec84fa1a4DR
56773da33ba948469db1f7ab9d9bc267d2e29b3458b2d1376573c09525ad4581DQ
f89d39e2f15a5f9de6ac154edd1ca68886b384c0e12ef5657eb722c92e9c0788DP
789245b54d2cc37181b3209ca55431722601a4544e987a98c0953c1b64660406DO
b3cdcec7059a05b036622e2b2326259602d28b19672e0fe8766f1b0c59537bc9DN
fbc2fabe0f2dd520e1af93518f0669fbb0c91b469d7508a7402404cbbea73b6d
J }_B J ema
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726
i-
Julien Rische <jrische@redhat.com> - 1.15.1-55cjD- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961i
Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163i;
Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319m=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492
M | M i;
Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319
m=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492 m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492
m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492 m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289omu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126
w yj` w ema
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347|m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927|m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>- Update man pages to reference kerberos(7)
- Resolves: #1704726
i-
Julien Rische <jrische@redhat.com> - 1.15.1-55cjD- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961i
Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163
| | | | m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927|m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>- Update man pages to reference kerberos(7)
- Resolves: #1704726 m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289omu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126
v #m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492"m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492!m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289o mu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126e ma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726| m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506 m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347
{q *m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289o)mu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126e(ma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|'m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506&m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347|%m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927 $m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492
R }u\ R |1m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #16635060m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347|/m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927.m=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 -m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492,m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492+m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492
z $ z 8m=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 7m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #17824926m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #17824925m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #17824924m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289o3mu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126e2ma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726
?m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492>m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492=m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492<m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289o;mu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126e:ma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|9m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506
h gJa h Fm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289oEmu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126eDma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|Cm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506Bi
Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163Ai;
Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319@m=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599
V }uF V eMma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726Li
Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163Ki;
Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319Jm=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 Im
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492Hm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492Gm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492
M | M Ti;
Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319Sm=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 Rm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492Qm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492Pm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492Om
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289oNmu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126
y [m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492Zm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492Ym
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289oXmu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126eWma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726
Vi-
Julien Rische <jrische@redhat.com> - 1.15.1-55cjD- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961Ui
Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163
6 {L6 6 |bm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927|am
Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>- Update man pages to reference kerberos(7)
- Resolves: #1704726
`i-
Julien Rische <jrische@redhat.com> - 1.15.1-55cjD- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961_i
Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163^i;
Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319]m=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 \m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492
v im
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492hm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492gm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289ofmu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126eema
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|dm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506cm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347
{q pm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289oomu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126enma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|mm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506lm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347|km
Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927 jm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492
}u\ owmu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126evma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|um
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506tm=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 sm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492rm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492qm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492
9 ztV 9 ~i
Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163}i;
Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319|m=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 {m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492zm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492ym
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492xm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289
e r+V: e Dg
caf7f0adf042b63657e0610f87dbb3aa3334f9a81292aa836ddc648117954f9dDf
81bcb4324bc25258c6e46c0bdc146842422c22344fda2af0164660b98db7c0dcDe
249e4941a5a5071a668ba290a7dc5e28013fd43206a9a9b2a2a236220aee04ddDd
8398bd6b079096f5128dc71162f6fb902418319a1f157c08cd55e55ea7b42815Dc
9f8bb077bbb9a1599bd7dfb6b7973517ca6a23674134edc3822c31d459a0fcf0Db
ea48b9fb3553584f758b7a3b5b3689740e4d04e82eb6d0359b8fecbde72b9b23Da
87aee3a9528b247730a778c50eab6e97da58d331049a063fa5f651d993db29d5D`
63c82c1e8917281adf931c995b90cce5c368fb95285f2659b691785c1fdd6a86D_
2da57e3f11f7feb8e50c18578d16794bb2a9a020b5c7c2a5ed12d4c49a0e597dD^
180fe822e8d8229970daac8f8d746b4a0b83877121f93490003022ee941544c1D]
9d8090a78aa40baa54d3800a01ae8e374a61c7be5587eb90bc2cf279a1c29e2eD\
196df95b9b19a08f79321b9b3709379e9fbdf71dd5cdc4d74bd313d84468f412D[
b64165d72cf869748c81b8e41581c93b8354747c22d548ae910ab54e118a90a5
z $ z m=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289o mu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126ema
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726
J jTT J | m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506 m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347|
m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927| m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>- Update man pages to reference kerberos(7)
- Resolves: #1704726
i-
Julien Rische <jrische@redhat.com> - 1.15.1-55cjD- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961i
Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163i;
Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319
$ |m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927 m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289omu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126e
ma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726
v m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289omu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126ema
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347
} {b } !m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492 m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289o mu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126e ma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726| m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506 m=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492
f }_B f o(mu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126e'ma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726&i
Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163%i;
Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319$m=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 #m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492"m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492
9 ztV 9 /i
Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163.i;
Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319-m=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 ,m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492+m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492*m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492)m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289
qqg o6mu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126e5ma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|4m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #16635063m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347|2m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927|1m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>- Update man pages to reference kerberos(7)
- Resolves: #1704726
0i-
Julien Rische <jrische@redhat.com> - 1.15.1-55cjD- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961
e zto e |=m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506<m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347|;m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927 :m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #17824929m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #17824928m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #17824927m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289
z $ z Dm=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 Cm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492Bm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492Am
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492@m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289o?mu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126e>ma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726
Km
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492Jm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492Im
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492Hm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289oGmu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126eFma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|Em
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506
e gJn e Rm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492Qm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289oPmu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126eOma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726Ni
Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163Mi;
Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319Lm=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599
3 }_B 3 |Ym
Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>- Update man pages to reference kerberos(7)
- Resolves: #1704726
Xi-
Julien Rische <jrische@redhat.com> - 1.15.1-55cjD- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961Wi
Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163Vi;
Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319Um=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 Tm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492Sm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492
v
`m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492_m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289o^mu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126e]ma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|\m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506[m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347|Zm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927
}xn ogmu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126efma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|em
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506dm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347|cm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927 bm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492am
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492
m ztV m enma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|mm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506lm=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 km
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492jm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492im
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492hm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289
M | M ui;
Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319tm=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 sm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492rm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492qm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492pm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289oomu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126
y |m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492{m
Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492zm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492ym
Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289oxmu
Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126ewma
Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726vi
Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163
gJ: {C
Siteshwar Vashisht <svashisht@redhat.com> - 20120801-36Y- Fix setting terminal foreground process group while resuming process
Resolves: #1457990}{
Siteshwar Vashisht <svashisht@redhat.com> - 20120801-35Y- Fix warning while creating kia file
Resolves: #1438045
i-
Julien Rische <jrische@redhat.com> - 1.15.1-55cjD- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961i
Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163~i;
Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319}m=
Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599
e r+V: e Dt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 '}S
Siteshwar Vashisht <svashisht@redhat.com> - 20120801-141^0"@- Do not evaluate arithmetic expressions from environment variables at startup
Resolves: #1790544{}}
Siteshwar Vashisht <svashisht@redhat.com> - 20120801-140]S- Add virtual provides for /bin/ksh
Resolves: #1690042x}w
Siteshwar Vashisht <svashisht@redhat.com> - 20120801-139[ @- Fix a crash caused by memcmp()
Resolves: #1546749}
Siteshwar Vashisht <svashisht@redhat.com> - 20120801-138[@- Fix a crash due to out of bounds write
Resolves: #1506347 iU
Kamil Dudka <kdudka@redhat.com> - 20120801-137Z- Increase the release number by 100 to make sure it stays higher than in RHEL-6
Related: #1484937'{U
Siteshwar Vashisht <svashisht@redhat.com> - 20120801-37Zhu@- Add configuration option to enable signal bubbling for backward compatibility
Resolves: #1484937
* {, * x}w
Siteshwar Vashisht <svashisht@redhat.com> - 20120801-139[ @- Fix a crash caused by memcmp()
Resolves: #1546749}
Siteshwar Vashisht <svashisht@redhat.com> - 20120801-138[@- Fix a crash due to out of bounds write
Resolves: #1506347
iU
Kamil Dudka <kdudka@redhat.com> - 20120801-137Z- Increase the release number by 100 to make sure it stays higher than in RHEL-6
Related: #1484937' {U
Siteshwar Vashisht <svashisht@redhat.com> - 20120801-37Zhu@- Add configuration option to enable signal bubbling for backward compatibility
Resolves: #1484937 {C
Siteshwar Vashisht <svashisht@redhat.com> - 20120801-36Y- Fix setting terminal foreground process group while resuming process
Resolves: #1457990n
{e
Vincent Mihalkovic <vmihalko@redhat.com> - 20120801-143aV@- Stack robustness fixes
Related: #2007364l }_
Siteshwar Vashisht <svashisht@redhat.com> - 20120801-142^J@- Bump version number
Related: #1790544
3 eu 3 [gQ
Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603^gY
Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129z{}
Vincent Mihalkovic <vmihalko@redhat.com> - 20120801-144b
- Stack robustness additional fixes
Resolves: #2053503n{e
Vincent Mihalkovic <vmihalko@redhat.com> - 20120801-143aV@- Stack robustness fixes
Related: #2007364l}_
Siteshwar Vashisht <svashisht@redhat.com> - 20120801-142^J@- Bump version number
Related: #1790544'}S
Siteshwar Vashisht <svashisht@redhat.com> - 20120801-141^0"@- Do not evaluate arithmetic expressions from environment variables at startup
Resolves: #1790544{}}
Siteshwar Vashisht <svashisht@redhat.com> - 20120801-140]S- Add virtual provides for /bin/ksh
Resolves: #1690042
hq -is
Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762iO
Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560Ki/
Jan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441gA
Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002
t [ gQ
Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603^ gY
Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129 i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159 i5
Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401t i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048
hq -%is
Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762$iO
Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560#i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560K"i/
Jan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441!gA
Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002
t [*gQ
Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603^)gY
Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129(i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159'i5
Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401t&i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048
hq -/is
Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762.iO
Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560-i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560K,i/
Jan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441+gA
Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002
t [4gQ
Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603^3gY
Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#12601292i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#18561591i5
Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401t0i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048
hq -9is
Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#16117628iO
Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#13425607i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560K6i/
Jan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#13334415gA
Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002
t [>gQ
Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603^=gY
Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129<i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159;i5
Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401t:i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048
hq -Cis
Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762BiO
Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560Ai
Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560K@i/
Jan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441?gA
Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002
t [HgQ
Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603^GgY
Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129Fi
Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159Ei5
Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401tDi
Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048
hq -Mis
Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762LiO
Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560Ki
Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560KJi/
Jan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441IgA
Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002
t [RgQ
Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603^QgY
Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129Pi
Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159Oi5
Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401tNi
Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048
hq -Wis
Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762ViO
Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560Ui
Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560KTi/
Jan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441SgA
Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002
t [\gQ
Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603^[gY
Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129Zi
Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159Yi5
Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401tXi
Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048
hq -ais
Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762`iO
Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560_i
Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560K^i/
Jan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441]gA
Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002
t [fgQ
Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603^egY
Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129di
Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159ci5
Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401tbi
Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048
hq -kis
Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762jiO
Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560ii
Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560Khi/
Jan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441ggA
Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002
t [pgQ
Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603^ogY
Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129ni
Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159mi5
Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401tli
Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048
hq -uis
Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762tiO
Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560si
Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560Kri/
Jan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441qgA
Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002
# t( # d{ak
John Dennis <jdennis@redhat.com> - 2.5.1-1WYZ@- Rebase to upstream 2.5.1
Resolves: #1310860zaQ
John Dennis <jdennis@redhat.com> - 2.5.0-1U6@- Rebase to upstream, now includes our ECP patches, no need to patch any more
Resolves: #1205342?ya
John Dennis <jdennis@redhat.com> - 2.4.1-8U@- Add explicit minimum dependency on glib2 2.42,
for some reason RPM is not automatically detecting the dependency
Resolves: #1254989xi
Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159wi5
Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401tvi
Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048
M sM 5~c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4]6- Resolves: #1730009 - lasso includes "Destination" attribute in SAML
AuthnRequest populated with SP
AssertionConsumerServiceURL when ECP workflow
is used which leads to IdP-side errorsg}cm
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3\`@- Resolves: #1634267 - ECP signature check fails with
LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
instead of response|a1
John Dennis <jdennis@redhat.com> - 2.5.1-2Wc@- Rebase to upstream 2.5.1
Resolves: #1310860
- add validate_idp_list_test patch
I qc
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7`r- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses; c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6`r- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses2c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5]Ik- Resolves: #1719014 - Expired certificate prevents tests from running
- Actually apply the patch file for the previous build
- Related: #1730009 - lasso includes "Destination" attribute in SAML
AuthnRequest populated with SP
AssertionConsumerServiceURL when ECP workflow
is used which leads to IdP-side errors
FA a1
John Dennis <jdennis@redhat.com> - 2.5.1-2Wc@- Rebase to upstream 2.5.1
Resolves: #1310860
- add validate_idp_list_test patchdak
John Dennis <jdennis@redhat.com> - 2.5.1-1WYZ@- Rebase to upstream 2.5.1
Resolves: #1310860aQ
John Dennis <jdennis@redhat.com> - 2.5.0-1U6@- Rebase to upstream, now includes our ECP patches, no need to patch any more
Resolves: #1205342?a
John Dennis <jdennis@redhat.com> - 2.4.1-8U@- Add explicit minimum dependency on glib2 2.42,
for some reason RPM is not automatically detecting the dependency
Resolves: #1254989qc
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-8`r- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses
e r+V: e D
9d8f852847d542b8ca3a8f7afddddd363dfd43bfa65cfbf6dfc8aa04498417daD
c053243ee1cb35d96150add59e7a1c0861276f5b2a3a9ca734501801a605c029D
fdbe2525e655b8cf975f2027191bcc9231946f75aa3196dd6bc68d144b98da20D~
a95d1f4bc03b57d5bf45411152deb77c11b8f7e7eea468e1ac9786e41c70b339D}
2a27d4cd848272f9c9e4251b28efc591660799054bcd62d321892c0a8a608f9dD|
232113158f29ca0be28b87fea599e2ceb671ea597d510b952fa9490d78950783D{
e08f5391f6f27a9c77207532b12000e6771dbbab3411de893ea6640343d7c557Dz
27258fffe6d62545a0a0c40b4e07b0f92e1a3b79588415f8f1242624918720bcDy
67364ca692de365478eee5a94879717c1fae2b7a4ba46d128ec04f0477c8c2b5Dx
0ff1974a6100b7f2cbd7eed090daafd948fcf3710a299e3b612fb23e609059deDw
82146c665ec6adb6b5a44f5163ac78834431f9d37ddbeee4cc990634d979481bDv
41389a794b7cc04dd2e3fd21ff891d278296ee4aefdfda8491c6075a8b52e2d7Du
dc77ee42e3378dfc1bde015704e9af335bd8e6829d547325da2fc62adc0db229
# # 2 c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5]Ik- Resolves: #1719014 - Expired certificate prevents tests from running
- Actually apply the patch file for the previous build
- Related: #1730009 - lasso includes "Destination" attribute in SAML
AuthnRequest populated with SP
AssertionConsumerServiceURL when ECP workflow
is used which leads to IdP-side errors5c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4]6- Resolves: #1730009 - lasso includes "Destination" attribute in SAML
AuthnRequest populated with SP
AssertionConsumerServiceURL when ECP workflow
is used which leads to IdP-side errorsgcm
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3\`@- Resolves: #1634267 - ECP signature check fails with
LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
instead of response
@JT ?
a
John Dennis <jdennis@redhat.com> - 2.4.1-8U@- Add explicit minimum dependency on glib2 2.42,
for some reason RPM is not automatically detecting the dependency
Resolves: #1254989q c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-8`r- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responsesq c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7`r- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses;
c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6`r- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses
H cn H 5c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4]6- Resolves: #1730009 - lasso includes "Destination" attribute in SAML
AuthnRequest populated with SP
AssertionConsumerServiceURL when ECP workflow
is used which leads to IdP-side errorsgcm
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3\`@- Resolves: #1634267 - ECP signature check fails with
LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
instead of responsea1
John Dennis <jdennis@redhat.com> - 2.5.1-2Wc@- Rebase to upstream 2.5.1
Resolves: #1310860
- add validate_idp_list_test patchdak
John Dennis <jdennis@redhat.com> - 2.5.1-1WYZ@- Rebase to upstream 2.5.1
Resolves: #1310860aQ
John Dennis <jdennis@redhat.com> - 2.5.0-1U6@- Rebase to upstream, now includes our ECP patches, no need to patch any more
Resolves: #1205342
I qc
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7`r- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses;c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6`r- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses2c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5]Ik- Resolves: #1719014 - Expired certificate prevents tests from running
- Actually apply the patch file for the previous build
- Related: #1730009 - lasso includes "Destination" attribute in SAML
AuthnRequest populated with SP
AssertionConsumerServiceURL when ECP workflow
is used which leads to IdP-side errors
FA a1
John Dennis <jdennis@redhat.com> - 2.5.1-2Wc@- Rebase to upstream 2.5.1
Resolves: #1310860
- add validate_idp_list_test patchdak
John Dennis <jdennis@redhat.com> - 2.5.1-1WYZ@- Rebase to upstream 2.5.1
Resolves: #1310860aQ
John Dennis <jdennis@redhat.com> - 2.5.0-1U6@- Rebase to upstream, now includes our ECP patches, no need to patch any more
Resolves: #1205342?a
John Dennis <jdennis@redhat.com> - 2.4.1-8U@- Add explicit minimum dependency on glib2 2.42,
for some reason RPM is not automatically detecting the dependency
Resolves: #1254989qc
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-8`r- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses
# # 2 c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5]Ik- Resolves: #1719014 - Expired certificate prevents tests from running
- Actually apply the patch file for the previous build
- Related: #1730009 - lasso includes "Destination" attribute in SAML
AuthnRequest populated with SP
AssertionConsumerServiceURL when ECP workflow
is used which leads to IdP-side errors5 c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4]6- Resolves: #1730009 - lasso includes "Destination" attribute in SAML
AuthnRequest populated with SP
AssertionConsumerServiceURL when ECP workflow
is used which leads to IdP-side errorsgcm
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3\`@- Resolves: #1634267 - ECP signature check fails with
LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
instead of response
@JT ?!a
John Dennis <jdennis@redhat.com> - 2.4.1-8U@- Add explicit minimum dependency on glib2 2.42,
for some reason RPM is not automatically detecting the dependency
Resolves: #1254989q c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-8`r- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responsesq c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7`r- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses; c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6`r- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses
H cn H 5&c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4]6- Resolves: #1730009 - lasso includes "Destination" attribute in SAML
AuthnRequest populated with SP
AssertionConsumerServiceURL when ECP workflow
is used which leads to IdP-side errorsg%cm
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3\`@- Resolves: #1634267 - ECP signature check fails with
LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
instead of response$a1
John Dennis <jdennis@redhat.com> - 2.5.1-2Wc@- Rebase to upstream 2.5.1
Resolves: #1310860
- add validate_idp_list_test patchd#ak
John Dennis <jdennis@redhat.com> - 2.5.1-1WYZ@- Rebase to upstream 2.5.1
Resolves: #1310860"aQ
John Dennis <jdennis@redhat.com> - 2.5.0-1U6@- Rebase to upstream, now includes our ECP patches, no need to patch any more
Resolves: #1205342
I q)c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7`r- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses;(c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6`r- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses2'c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5]Ik- Resolves: #1719014 - Expired certificate prevents tests from running
- Actually apply the patch file for the previous build
- Related: #1730009 - lasso includes "Destination" attribute in SAML
AuthnRequest populated with SP
AssertionConsumerServiceURL when ECP workflow
is used which leads to IdP-side errors
A
b A v/c
Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1Z̧@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase".cc
Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1YM- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
version 4.7.x#-ec
Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1X@- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
version 4.6.xr,e
Jakub Hrozek <jhrozek@redhat.com> - 1.1.26-1WYZ@- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26+e'
Jakub Hrozek <jhrozek@redhat.com> - 1.1.25-1Vb- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691q*c
Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-8`r- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses
` 6i5
Fridolin Pokorny <fpokorny@redhat.com> - 458-2Qf- Added gpg support to lesspipe.sh (#885122)
- Added ~/.lessfilter support (#885122)H5i+
Fridolin Pokorny <fpokorny@redhat.com> - 458-1Qf- Update to 458`4e_
Andreas Schneider <asn@redhat.com> - 1.5.4-2`Y@- resolves: #1941511 - Fix CVE-2021-20277z3c
Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1]B@- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Sambaz2c
Jakub Hrozek <jhrozek@redhat.com> - 1.4.2-1\? - Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Sambav1c
Jakub Hrozek <jhrozek@redhat.com> - 1.3.4-1[3|@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasev0c
Jakub Hrozek <jhrozek@redhat.com> - 1.3.3-1Z- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase
. (=[w
Jozef Mlich <jmlich@redhat.com> - 458-9U]- The --use-backslash option documented in the man page
was missing from online help for less.
Resolves: #11090907<[
Jozef Mlich <jmlich@redhat.com> - 458-8R- changes introduced in less-458-old-bot-in-help.patch
wasn't compiled in. It is necessary to use mkhelp tool.
Resolves: #948597J;Y?
Daniel Mach <dmach@redhat.com> - 458-7RU- Mass rebuild 2014-01-24J:Y?
Daniel Mach <dmach@redhat.com> - 458-6Rk- Mass rebuild 2013-12-2729[
Jozef Mlich <jmlich@redhat.com> - 458-5Rv@- fixing regression in 72dfd3f63594e1d4c9416180a95c47ae583934c6
incorrect parsing of commandline arguments
- Resolves #948597X8]W
Ondrej Vasik <ovasik@redhat.com> - 458-4Qޞ@- apply the --old-bot patch (#983167)M7i3
Fridolin Pokorny <fpokorny@redhat.com> - 458-3Q- Expanded lessecho usage (#948597)
- Added lessfilter info to man (#948597)
- Expanded lesskey usage (#948597)
- Added --old-bot to help (#948597)
B '[ B C=W
Michal Ruprich - 4.4.8-9X l- Resolves: #1374653 - File size decreases when synchronizing folders with a sftp account using lftpBk#
Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-8W4p@- Resolves: #1285301 - lftp hangs after dowloading one file during a mirrorAk%
Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-7U~@- Fixed issue with absolute URL locations in mirror mode
- Related: #1181580;@k
Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6US<- Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
- Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
- Added RFE - lftp configurations for restricting each SSL/TLS
version (#1182987)
- Fixed bogus dates of this SPECp?i{
Lubos Uhliarik <luhliari@redhat.com> - 4.4.8-5UQ@- Fix option xfer:auto-rename not documented (#1035229)a>cc
Matej Mužila <mmuzila@redhat.com> - 458-10f'- Fix CVE-2024-32487
- Resolves: RHEL-32802
M -R M Hk-
Michal Ruprich <mruprich@redhat.com> - 4.4.8-14c:- Resolves: #2115215 - Request "--env-password" option for lftp 4.4.8 for RHEL 7;Gk
Michal Ruprich <mruprich@redhat.com> - 4.4.8-13^9\- Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated0Fkw
Michal Ruprich <mruprich@redhat.com> - 4.4.8-12]8H@- Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erasedVEkC
Michal Ruprich <mruprich@redhat.com> - 4.4.8-11Z- Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
- Resolves: #1556675 - "get" command with lftp does not fail on net:max-retriesND?_
Michal Ruprich - 4.4.8-10X)@- Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
- Patch edited so that it corresponds to upstream
L5 M=W
Michal Ruprich - 4.4.8-9X l- Resolves: #1374653 - File size decreases when synchronizing folders with a sftp account using lftpLk#
Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-8W4p@- Resolves: #1285301 - lftp hangs after dowloading one file during a mirrorKk%
Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-7U~@- Fixed issue with absolute URL locations in mirror mode
- Related: #1181580;Jk
Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6US<- Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
- Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
- Added RFE - lftp configurations for restricting each SSL/TLS
version (#1182987)
- Fixed bogus dates of this SPECpIi{
Lubos Uhliarik <luhliari@redhat.com> - 4.4.8-5UQ@- Fix option xfer:auto-rename not documented (#1035229)
M -R M Rk-
Michal Ruprich <mruprich@redhat.com> - 4.4.8-14c:- Resolves: #2115215 - Request "--env-password" option for lftp 4.4.8 for RHEL 7;Qk
Michal Ruprich <mruprich@redhat.com> - 4.4.8-13^9\- Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated0Pkw
Michal Ruprich <mruprich@redhat.com> - 4.4.8-12]8H@- Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erasedVOkC
Michal Ruprich <mruprich@redhat.com> - 4.4.8-11Z- Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
- Resolves: #1556675 - "get" command with lftp does not fail on net:max-retriesNN?_
Michal Ruprich - 4.4.8-10X)@- Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
- Patch edited so that it corresponds to upstream
L5 W=W
Michal Ruprich - 4.4.8-9X l- Resolves: #1374653 - File size decreases when synchronizing folders with a sftp account using lftpVk#
Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-8W4p@- Resolves: #1285301 - lftp hangs after dowloading one file during a mirrorUk%
Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-7U~@- Fixed issue with absolute URL locations in mirror mode
- Related: #1181580;Tk
Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6US<- Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
- Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
- Added RFE - lftp configurations for restricting each SSL/TLS
version (#1182987)
- Fixed bogus dates of this SPECpSi{
Lubos Uhliarik <luhliari@redhat.com> - 4.4.8-5UQ@- Fix option xfer:auto-rename not documented (#1035229)
M -R M \k-
Michal Ruprich <mruprich@redhat.com> - 4.4.8-14c:- Resolves: #2115215 - Request "--env-password" option for lftp 4.4.8 for RHEL 7;[k
Michal Ruprich <mruprich@redhat.com> - 4.4.8-13^9\- Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated0Zkw
Michal Ruprich <mruprich@redhat.com> - 4.4.8-12]8H@- Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erasedVYkC
Michal Ruprich <mruprich@redhat.com> - 4.4.8-11Z- Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
- Resolves: #1556675 - "get" command with lftp does not fail on net:max-retriesNX?_
Michal Ruprich - 4.4.8-10X)@- Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
- Patch edited so that it corresponds to upstream
P V~9] P XfiK
Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_- Fix CVE-2020-14363 (#1873922)he]w
Adam Jackson <ajax@redhat.com> - 1.6.7-2\"- Restore the less-alarming server-disconnect messageAd])
Adam Jackson <ajax@redhat.com> - 1.6.7-1\r@- libX11 1.6.7ec]q
Adam Jackson <ajax@redhat.com> - 1.6.5-3\y - Make the server-disconnect message less alarmingobqq
Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB- Rebuild to pick up new xproto keysyms (#1600147)Aa])
Adam Jackson <ajax@redhat.com> - 1.6.5-1Y - libX11 1.6.5d`q[
Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X- Actually apply the patch from 1.6.4-3l_qk
Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2a^qU
Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()A]])
Adam Jackson <ajax@redhat.com> - 1.6.4-1W@- libX11 1.6.4
P V~9] P XpiK
Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_- Fix CVE-2020-14363 (#1873922)ho]w
Adam Jackson <ajax@redhat.com> - 1.6.7-2\"- Restore the less-alarming server-disconnect messageAn])
Adam Jackson <ajax@redhat.com> - 1.6.7-1\r@- libX11 1.6.7em]q
Adam Jackson <ajax@redhat.com> - 1.6.5-3\y - Make the server-disconnect message less alarmingolqq
Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB- Rebuild to pick up new xproto keysyms (#1600147)Ak])
Adam Jackson <ajax@redhat.com> - 1.6.5-1Y - libX11 1.6.5djq[
Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X- Actually apply the patch from 1.6.4-3liqk
Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2ahqU
Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()Ag])
Adam Jackson <ajax@redhat.com> - 1.6.4-1W@- libX11 1.6.4
? +~ ] ? Rz]K Adam Jackson <ajax@redhat.com> - 1.6.7-4a- Fix CVE-2021-31535 (#1962438)XyiK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_- Fix CVE-2020-14363 (#1873922)hx]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\"- Restore the less-alarming server-disconnect messageAw]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\r@- libX11 1.6.7ev]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y - Make the server-disconnect message less alarmingouqq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB- Rebuild to pick up new xproto keysyms (#1600147)At]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y - libX11 1.6.5dsq[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X- Actually apply the patch from 1.6.4-3lrqk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2aqqU Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()
? +~ ] ? R]K Adam Jackson <ajax@redhat.com> - 1.6.7-4a- Fix CVE-2021-31535 (#1962438)XiK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_- Fix CVE-2020-14363 (#1873922)h]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\"- Restore the less-alarming server-disconnect messageA]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\r@- libX11 1.6.7e ]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y - Make the server-disconnect message less alarmingoqq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB- Rebuild to pick up new xproto keysyms (#1600147)A~]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y - libX11 1.6.5d}q[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X- Actually apply the patch from 1.6.4-3l|qk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2a{qU Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()
e r+V: e D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! (pV ! k Olivier Fourdan <ofourdan@redhat.com> - 1.6.7-5e- Backport fix for Xlib lockups due to recursive XError (RHEL-23053)R
]K Adam Jackson <ajax@redhat.com> - 1.6.7-4a- Fix CVE-2021-31535 (#1962438)X iK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_- Fix CVE-2020-14363 (#1873922)h ]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\"- Restore the less-alarming server-disconnect messageA
]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\r@- libX11 1.6.7e ]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y - Make the server-disconnect message less alarmingoqq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB- Rebuild to pick up new xproto keysyms (#1600147)A]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y - libX11 1.6.5dq[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X- Actually apply the patch from 1.6.4-3lqk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2
! (pV ! k Olivier Fourdan <ofourdan@redhat.com> - 1.6.7-5e- Backport fix for Xlib lockups due to recursive XError (RHEL-23053)R]K Adam Jackson <ajax@redhat.com> - 1.6.7-4a- Fix CVE-2021-31535 (#1962438)XiK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_- Fix CVE-2020-14363 (#1873922)h]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\"- Restore the less-alarming server-disconnect messageA]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\r@- libX11 1.6.7e]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y - Make the server-disconnect message less alarmingoqq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB- Rebuild to pick up new xproto keysyms (#1600147)A]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y - libX11 1.6.5dq[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X- Actually apply the patch from 1.6.4-3lqk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2
P V~9] P X"iK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_- Fix CVE-2020-14363 (#1873922)h!]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\"- Restore the less-alarming server-disconnect messageA ]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\r@- libX11 1.6.7e ]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y - Make the server-disconnect message less alarmingo qq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB- Rebuild to pick up new xproto keysyms (#1600147)A ]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y - libX11 1.6.5d q[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X- Actually apply the patch from 1.6.4-3lqk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2aqU Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()A]) Adam Jackson <ajax@redhat.com> - 1.6.4-1W@- libX11 1.6.4
? +~ ] ? R,]K Adam Jackson <ajax@redhat.com> - 1.6.7-4a- Fix CVE-2021-31535 (#1962438)X+iK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_- Fix CVE-2020-14363 (#1873922)h*]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\"- Restore the less-alarming server-disconnect messageA)]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\r@- libX11 1.6.7e(]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y - Make the server-disconnect message less alarmingo'qq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB- Rebuild to pick up new xproto keysyms (#1600147)A&]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y - libX11 1.6.5d%q[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X- Actually apply the patch from 1.6.4-3l$qk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2a#qU Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()
! (pV ! 6k Olivier Fourdan <ofourdan@redhat.com> - 1.6.7-5e- Backport fix for Xlib lockups due to recursive XError (RHEL-23053)R5]K Adam Jackson <ajax@redhat.com> - 1.6.7-4a- Fix CVE-2021-31535 (#1962438)X4iK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_- Fix CVE-2020-14363 (#1873922)h3]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\"- Restore the less-alarming server-disconnect messageA2]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\r@- libX11 1.6.7e1]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y - Make the server-disconnect message less alarmingo0qq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB- Rebuild to pick up new xproto keysyms (#1600147)A/]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y - libX11 1.6.5d.q[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X- Actually apply the patch from 1.6.4-3l-qk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2 bR "RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ "> "C "H "M "R "W "\ "a "f "k "p "u "{ "~ " " " "
" " " " "! "& ") "/ "6 "= "C "H "M "R "W "\ "f "p "z " " " "" ", "6 "@ "J "T "Á^ "āh "Łr "Ɓy "ǁ "ȁ "ʁ "ˁ "́ "́ "# "ρ( "Ё+ "с- "ҁ2 "Ӂ5 "ԁ7 "Ձ< "ց? "ׁA "H "فQ "ځZ "ہc "܁k "݁q "ށv "߁~ " " " " " "# "( "/ "4 ": "= "> "A "E "G "H "K "O "P "Q "T "Y "Z "[
P V~9] P X@iK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_- Fix CVE-2020-14363 (#1873922)h?]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\"- Restore the less-alarming server-disconnect messageA>]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\r@- libX11 1.6.7e=]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y - Make the server-disconnect message less alarmingo<qq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB- Rebuild to pick up new xproto keysyms (#1600147)A;]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y - libX11 1.6.5d:q[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X- Actually apply the patch from 1.6.4-3l9qk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2a8qU Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()A7]) Adam Jackson <ajax@redhat.com> - 1.6.4-1W@- libX11 1.6.4
P V~9] P XJiK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_- Fix CVE-2020-14363 (#1873922)hI]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\"- Restore the less-alarming server-disconnect messageAH]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\r@- libX11 1.6.7eG]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y - Make the server-disconnect message less alarmingoFqq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB- Rebuild to pick up new xproto keysyms (#1600147)AE]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y - libX11 1.6.5dDq[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X- Actually apply the patch from 1.6.4-3lCqk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2aBqU Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()AA]) Adam Jackson <ajax@redhat.com> - 1.6.4-1W@- libX11 1.6.4
? +~ ] ? RT]K Adam Jackson <ajax@redhat.com> - 1.6.7-4a- Fix CVE-2021-31535 (#1962438)XSiK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_- Fix CVE-2020-14363 (#1873922)hR]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\"- Restore the less-alarming server-disconnect messageAQ]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\r@- libX11 1.6.7eP]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y - Make the server-disconnect message less alarmingoOqq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB- Rebuild to pick up new xproto keysyms (#1600147)AN]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y - libX11 1.6.5dMq[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X- Actually apply the patch from 1.6.4-3lLqk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2aKqU Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()
? +~ ] ? R^]K
Adam Jackson <ajax@redhat.com> - 1.6.7-4a- Fix CVE-2021-31535 (#1962438)X]iK
Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_- Fix CVE-2020-14363 (#1873922)h\]w
Adam Jackson <ajax@redhat.com> - 1.6.7-2\"- Restore the less-alarming server-disconnect messageA[])
Adam Jackson <ajax@redhat.com> - 1.6.7-1\r@- libX11 1.6.7eZ]q
Adam Jackson <ajax@redhat.com> - 1.6.5-3\y - Make the server-disconnect message less alarmingoYqq
Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB- Rebuild to pick up new xproto keysyms (#1600147)AX])
Adam Jackson <ajax@redhat.com> - 1.6.5-1Y - libX11 1.6.5dWq[
Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X- Actually apply the patch from 1.6.4-3lVqk
Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2aUqU
Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()
! (pV ! hk Olivier Fourdan <ofourdan@redhat.com> - 1.6.7-5e- Backport fix for Xlib lockups due to recursive XError (RHEL-23053)Rg]K Adam Jackson <ajax@redhat.com> - 1.6.7-4a- Fix CVE-2021-31535 (#1962438)XfiK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_- Fix CVE-2020-14363 (#1873922)he]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\"- Restore the less-alarming server-disconnect messageAd]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\r@- libX11 1.6.7ec]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y - Make the server-disconnect message less alarmingobqq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB- Rebuild to pick up new xproto keysyms (#1600147)Aa]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y - libX11 1.6.5d`q[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X- Actually apply the patch from 1.6.4-3l_qk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2
! (pV ! rk Olivier Fourdan <ofourdan@redhat.com> - 1.6.7-5e- Backport fix for Xlib lockups due to recursive XError (RHEL-23053)Rq]K Adam Jackson <ajax@redhat.com> - 1.6.7-4a- Fix CVE-2021-31535 (#1962438)XpiK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_- Fix CVE-2020-14363 (#1873922)ho]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\"- Restore the less-alarming server-disconnect messageAn]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\r@- libX11 1.6.7em]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y - Make the server-disconnect message less alarmingolqq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB- Rebuild to pick up new xproto keysyms (#1600147)Ak]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y - libX11 1.6.5djq[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X- Actually apply the patch from 1.6.4-3liqk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2
'- y
Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-2S- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildZx[]
Adam Jackson <ajax@redhat.com> 3.5.11-1Rb@- libXpm 3.5.11
- Drop pre-F18 changelogw
Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-5Q- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_RebuildXvw=
Peter Hutterer <peter.hutterer@redhat.com> - 3.5.10-4Q8@- autoreconf for aarch64u
Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-3Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuildt
Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-2P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildAs[+
Adam Jackson <ajax@redhat.com> 3.5.10-1OX@- libXpm 3.5.10
a|7 X w= Peter Hutterer <peter.hutterer@redhat.com> - 3.5.10-4Q8@- autoreconf for aarch64 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-3Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild~ Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-2P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildA}[+ Adam Jackson <ajax@redhat.com> 3.5.10-1OX@- libXpm 3.5.10|w
Peter Hutterer <peter.hutterer@redhat.com> - 3.5.12-2c0- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)V{+
Benjamin Tissoires <benjamin.tissoires@redhat.com> 3.5.12-1X@- libXpm 3.5.12z
Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-3S@- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
djq A[+ Adam Jackson <ajax@redhat.com> 3.5.10-1OX@- libXpm 3.5.10w Peter Hutterer <peter.hutterer@redhat.com> - 3.5.12-2c0- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)V+ Benjamin Tissoires <benjamin.tissoires@redhat.com> 3.5.12-1X@- libXpm 3.5.12 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-3S@- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-2S- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildZ[] Adam Jackson <ajax@redhat.com> 3.5.11-1Rb@- libXpm 3.5.11
- Drop pre-F18 changelog Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-5Q- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
e r+V: e D
faea0d6adefaa474577c184f31a44469d13846a44412ea382dafc9f9ea6a3a77D
4ad0b71e3a6468fba1b43ab82fad024415b5296c7b77d1348fb9afa3f828f98eD
3054ca1c0cc8eef5f08ce1d3be56c7a39e97d92361e8bd265bea14d06f590219D
73952b31447b02abc10d1c2efafb6def58e9237532ddef9eb3a691baaa88a495D
6602351182c085c415d4c05b7e325611057898b48cdc1249a54c5106cd0735fdD
eeec2b53758cdbb0b3f3402b7117dddcf34c40e99612fc0ec69bb799b2a7b6beD
b9bc38488c309455bbf6f753ef1aaaa244614ec08a027b5ff58a7b234006eac1D
a687b481be7d8b127fe830b2c0840854683d1ac18a2c1799d5caac56e8891e8fD
ea09355eb6ee209c2b42e898475fc5462249ee3f27b0dd881ee2fd0db8245464D
0eda90367bc11ce10165853be705e1303b3ac2a0f5072131cbd8b2ea6ed2d1eaD
b856dd2cc821e1fa2cbc89c6901577691af284f98280ef05cc1a7c3826acae41D
938bb9ba7be38a8654b48fbbb34f5d8a3a6db6e2453cbe54b8b837c099acb52cD
26dd5513dd4b2211aa6f24f32382b86bafd5ff88c0d642448cc8725093a58146
7 dlr 7 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-3S@- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-2S- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildZ [] Adam Jackson <ajax@redhat.com> 3.5.11-1Rb@- libXpm 3.5.11
- Drop pre-F18 changelog Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-5Q- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_RebuildX
w= Peter Hutterer <peter.hutterer@redhat.com> - 3.5.10-4Q8@- autoreconf for aarch64 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-3Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-2P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
H :B H Z[] Adam Jackson <ajax@redhat.com> 3.5.11-1Rb@- libXpm 3.5.11
- Drop pre-F18 changelog Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-5Q- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_RebuildXw= Peter Hutterer <peter.hutterer@redhat.com> - 3.5.10-4Q8@- autoreconf for aarch64 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-3Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-2P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildA[+ Adam Jackson <ajax@redhat.com> 3.5.10-1OX@- libXpm 3.5.10w Peter Hutterer <peter.hutterer@redhat.com> - 3.5.12-2c0- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)V+ Benjamin Tissoires <benjamin.tissoires@redhat.com> 3.5.12-1X@- libXpm 3.5.12
L dk} L = W% Karel Zak <kzak@redhat.com> 2.23.2-59[z@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failedk W Karel Zak <kzak@redhat.com> 2.23.2-58[<- fix #1594681 - [RHEL7.2] blkid does not output swap area_Wk Karel Zak <kzak@redhat.com> 2.23.2-57["X- add another ppc aliases to setarch (#1562125)w Peter Hutterer <peter.hutterer@redhat.com> - 3.5.12-2c0- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)V+ Benjamin Tissoires <benjamin.tissoires@redhat.com> 3.5.12-1X@- libXpm 3.5.12 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-3S@- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-2S- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
, Sr , A W- Karel Zak <kzak@redhat.com> 2.23.2-62]Ik- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information\ Wc Karel Zak <kzak@redhat.com> 2.23.2-61\@- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev( W{ Karel Zak <kzak@redhat.com> 2.23.2-60\R@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login
l a#Wm Karel Zak <kzak@redhat.com> 2.23.2-65^@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directoryZ"W_ Karel Zak <kzak@redhat.com> 2.23.2-64^k@- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit!WI Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.
v T# v ((W{ Karel Zak <kzak@redhat.com> 2.23.2-60\R@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login='W% Karel Zak <kzak@redhat.com> 2.23.2-59[z@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failedk&W Karel Zak <kzak@redhat.com> 2.23.2-58[<- fix #1594681 - [RHEL7.2] blkid does not output swap area_%Wk Karel Zak <kzak@redhat.com> 2.23.2-57["X- add another ppc aliases to setarch (#1562125)D$g# Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]
E E +WI Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.A*W- Karel Zak <kzak@redhat.com> 2.23.2-62]Ik- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information\)Wc Karel Zak <kzak@redhat.com> 2.23.2-61\@- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev
; !; a-Wm Karel Zak <kzak@redhat.com> 2.23.2-65^@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directoryZ,W_ Karel Zak <kzak@redhat.com> 2.23.2-64^k@- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit
v T# v (2W{ Karel Zak <kzak@redhat.com> 2.23.2-60\R@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login=1W% Karel Zak <kzak@redhat.com> 2.23.2-59[z@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failedk0W Karel Zak <kzak@redhat.com> 2.23.2-58[<- fix #1594681 - [RHEL7.2] blkid does not output swap area_/Wk Karel Zak <kzak@redhat.com> 2.23.2-57["X- add another ppc aliases to setarch (#1562125)D.g# Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]
E E 5WI Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.A4W- Karel Zak <kzak@redhat.com> 2.23.2-62]Ik- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information\3Wc Karel Zak <kzak@redhat.com> 2.23.2-61\@- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev
; !; a7Wm Karel Zak <kzak@redhat.com> 2.23.2-65^@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directoryZ6W_ Karel Zak <kzak@redhat.com> 2.23.2-64^k@- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit
v T# v (<W{ Karel Zak <kzak@redhat.com> 2.23.2-60\R@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login=;W% Karel Zak <kzak@redhat.com> 2.23.2-59[z@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failedk:W Karel Zak <kzak@redhat.com> 2.23.2-58[<- fix #1594681 - [RHEL7.2] blkid does not output swap area_9Wk Karel Zak <kzak@redhat.com> 2.23.2-57["X- add another ppc aliases to setarch (#1562125)D8g# Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]
E E ?WI Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.A>W- Karel Zak <kzak@redhat.com> 2.23.2-62]Ik- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information\=Wc Karel Zak <kzak@redhat.com> 2.23.2-61\@- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev
; !; aAWm Karel Zak <kzak@redhat.com> 2.23.2-65^@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directoryZ@W_ Karel Zak <kzak@redhat.com> 2.23.2-64^k@- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit
[ i [ LH]? Daniel Mach <dmach@redhat.com> - 0.6.8-5RU- Mass rebuild 2014-01-24LG]? Daniel Mach <dmach@redhat.com> - 0.6.8-4Rk- Mass rebuild 2013-12-27 Fi Matthias Clasen <mclasen@redhat.com> - 0.6.8-3Q5- Disable strict aliasing, since the code is not strict-aliasing-cleanE Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.8-2Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildJDi/ Kalev Lember <kalevlember@gmail.com> - 0.6.8-1P@- Update to 0.6.8JCi/ Kalev Lember <kalevlember@gmail.com> - 0.6.7-1P}L@- Update to 0.6.7DBg# Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]
P :\% P LQ]? Daniel Mach <dmach@redhat.com> - 0.6.8-4Rk- Mass rebuild 2013-12-27 Pi Matthias Clasen <mclasen@redhat.com> - 0.6.8-3Q5- Disable strict aliasing, since the code is not strict-aliasing-cleanO Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.8-2Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildJNi/ Kalev Lember <kalevlember@gmail.com> - 0.6.8-1P@- Update to 0.6.8JMi/ Kalev Lember <kalevlember@gmail.com> - 0.6.7-1P}L@- Update to 0.6.7nLuk Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-6_'A- Rebuild with 7.9-z target
Related: #1835951hKu_ Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-5_'@- Fix CVE-2020-12825
Resolves: #1835951`Ji[ Richard Hughes <rhughes@redhat.com> - 0.6.12-4X-- Update to 0.6.12
- Resolves: #1569991^Ie[ Kalev Lember <klember@redhat.com> - 0.6.11-1Vr- Update to 0.6.11
- Resolves: #1386999
P N~ p P Zi Matthias Clasen <mclasen@redhat.com> - 0.6.8-3Q5- Disable strict aliasing, since the code is not strict-aliasing-cleanY Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.8-2Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildJXi/ Kalev Lember <kalevlember@gmail.com> - 0.6.8-1P@- Update to 0.6.8JWi/ Kalev Lember <kalevlember@gmail.com> - 0.6.7-1P}L@- Update to 0.6.7nVuk Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-6_'A- Rebuild with 7.9-z target
Related: #1835951hUu_ Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-5_'@- Fix CVE-2020-12825
Resolves: #1835951`Ti[ Richard Hughes <rhughes@redhat.com> - 0.6.12-4X-- Update to 0.6.12
- Resolves: #1569991^Se[ Kalev Lember <klember@redhat.com> - 0.6.11-1Vr- Update to 0.6.11
- Resolves: #1386999LR]? Daniel Mach <dmach@redhat.com> - 0.6.8-5RU- Mass rebuild 2014-01-24
`.n c Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.8-2Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildJbi/ Kalev Lember <kalevlember@gmail.com> - 0.6.8-1P@- Update to 0.6.8Jai/ Kalev Lember <kalevlember@gmail.com> - 0.6.7-1P}L@- Update to 0.6.7n`uk Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-6_'A- Rebuild with 7.9-z target
Related: #1835951h_u_ Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-5_'@- Fix CVE-2020-12825
Resolves: #1835951`^i[ Richard Hughes <rhughes@redhat.com> - 0.6.12-4X-- Update to 0.6.12
- Resolves: #1569991^]e[ Kalev Lember <klember@redhat.com> - 0.6.11-1Vr- Update to 0.6.11
- Resolves: #1386999L\]? Daniel Mach <dmach@redhat.com> - 0.6.8-5RU- Mass rebuild 2014-01-24L[]? Daniel Mach <dmach@redhat.com> - 0.6.8-4Rk- Mass rebuild 2013-12-27
{+y7 kc+ Kamil Dudka <kdudka@redhat.com> - 7.29.0-51[j@- require a new enough version of nss-pem to avoid regression in yum (#1610998)njuk Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-6_'A- Rebuild with 7.9-z target
Related: #1835951hiu_ Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-5_'@- Fix CVE-2020-12825
Resolves: #1835951`hi[ Richard Hughes <rhughes@redhat.com> - 0.6.12-4X-- Update to 0.6.12
- Resolves: #1569991^ge[ Kalev Lember <klember@redhat.com> - 0.6.11-1Vr- Update to 0.6.11
- Resolves: #1386999Lf]? Daniel Mach <dmach@redhat.com> - 0.6.8-5RU- Mass rebuild 2014-01-24Le]? Daniel Mach <dmach@redhat.com> - 0.6.8-4Rk- Mass rebuild 2013-12-27 di Matthias Clasen <mclasen@redhat.com> - 0.6.8-3Q5- Disable strict aliasing, since the code is not strict-aliasing-clean
+ r + hqcq Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]e@- allow curl to POST from a char device (#1769307)|pc Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]?- fix auth failure with duplicated WWW-Authenticate header (#1754736)hocq Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik- fix TFTP receive buffer overflow (CVE-2019-5436)jncu Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\ - make `curl --tlsv1` backward compatible (#1672639)}mc Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639) lc1 Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y - prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)
\ xu \ vc1 Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y - prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)uc+ Kamil Dudka <kdudka@redhat.com> - 7.29.0-51[j@- require a new enough version of nss-pem to avoid regression in yum (#1610998)vts} Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)sc' Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^?@- http: free protocol-specific struct in setup_connection callback (#1836773)rc% Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)
. %1 . v~s} Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)}c' Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^?@- http: free protocol-specific struct in setup_connection callback (#1836773)|c% Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)h{cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]e@- allow curl to POST from a char device (#1769307)|zc Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]?- fix auth failure with duplicated WWW-Authenticate header (#1754736)hycq Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik- fix TFTP receive buffer overflow (CVE-2019-5436)jxcu Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\ - make `curl --tlsv1` backward compatible (#1672639)}wc Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)
+ r + hcq Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]e@- allow curl to POST from a char device (#1769307)|c Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]?- fix auth failure with duplicated WWW-Authenticate header (#1754736)hcq Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik- fix TFTP receive buffer overflow (CVE-2019-5436)jcu Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\ - make `curl --tlsv1` backward compatible (#1672639)} c Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639) c1 Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y - prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)
E xu E c1 Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y - prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292) wE Jacek Migacz <jmigacz@redhat.com> - 7.29.0-59.el7_9.2eJ&- fix HTTP proxy deny use after free (CVE-2022-43552)
- rebuild certs with 2048-bit RSA keysvs} Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)c' Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^?@- http: free protocol-specific struct in setup_connection callback (#1836773)c% Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)
e r+V: e D(
d756103ebb5cdaa112e97017abdb37c31ccacc831f5042c1c0c423e446ab3b8fD'
d0c60cdd0430a434420ef3cbcd3cd9ebd0e4089f8059b3a3b7bc427c158c0505D&
cebe503265c9efa9afa036f10cf99ab4d5eeabe4c13950dc76ba50fc4304f4fcD%
c846a72195e654b76f0ca3467ec6a0e034d1907a307e6d797b1e4238ab8e1949D$
828fe4eb26915648840d50ea3daa571c3735822ed66eced81dd20b12dff3e10eD#
4c0432991858f896026445ef401636f12a857102f3329b8a5d034aa2e99e2bd4D"
059cd706e5668cb53ab32ca18815011ad932d1853567a29b3c7b2afca689e637D!
f3dc3c542749f94c4e3a601842a9a8d6311fb735a5d6ee8d3845ce5b137c43eeD
2670e3582d71b9a17efc9c2892e66a3c54a3160c71fdf742693ca914289185fcD
aead54e95d1462dda834e3f40fcfcf9312670076f263f156c631a937038d3b00D
f92fde3f97c0034135796baa7cd55f87c0550a88ac79adbdcc9c7f64c595614bD
7ab4f1b0aa285d3773fdbd8bfc529969ca101a627d3ea88bea1f99a42093e132D
34e3369ca1560dc34b862cce4a9fb6a7939494ce15ee0f68fb76edaf5fb3ee53
. %1 . vs} Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)c' Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^?@- http: free protocol-specific struct in setup_connection callback (#1836773)c% Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)hcq Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]e@- allow curl to POST from a char device (#1769307)|
c Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]?- fix auth failure with duplicated WWW-Authenticate header (#1754736)h cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik- fix TFTP receive buffer overflow (CVE-2019-5436)j cu Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\ - make `curl --tlsv1` backward compatible (#1672639)}
c Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)
V ^E V jcu Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\ - make `curl --tlsv1` backward compatible (#1672639)}c Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639) c1 Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y - prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)c+ Kamil Dudka <kdudka@redhat.com> - 7.29.0-51[j@- require a new enough version of nss-pem to avoid regression in yum (#1610998) wE Jacek Migacz <jmigacz@redhat.com> - 7.29.0-59.el7_9.2eJ&- fix HTTP proxy deny use after free (CVE-2022-43552)
- rebuild certs with 2048-bit RSA keys
c+ Kamil Dudka <kdudka@redhat.com> - 7.29.0-51[j@- require a new enough version of nss-pem to avoid regression in yum (#1610998)v s} Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)c' Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^?@- http: free protocol-specific struct in setup_connection callback (#1836773)c% Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)hcq Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]e@- allow curl to POST from a char device (#1769307)|c Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]?- fix auth failure with duplicated WWW-Authenticate header (#1754736)hcq Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik- fix TFTP receive buffer overflow (CVE-2019-5436)
+ r + h#cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]e@- allow curl to POST from a char device (#1769307)|"c Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]?- fix auth failure with duplicated WWW-Authenticate header (#1754736)h!cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik- fix TFTP receive buffer overflow (CVE-2019-5436)j cu Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\ - make `curl --tlsv1` backward compatible (#1672639)} c Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639) c1 Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y - prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)
f xu f }(c Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639) 'c1 Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y - prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)v&s} Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)%c' Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^?@- http: free protocol-specific struct in setup_connection callback (#1836773)$c% Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)
&:) v/s} Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177).c' Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^?@- http: free protocol-specific struct in setup_connection callback (#1836773)-c% Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)h,cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]e@- allow curl to POST from a char device (#1769307)|+c Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]?- fix auth failure with duplicated WWW-Authenticate header (#1754736)h*cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik- fix TFTP receive buffer overflow (CVE-2019-5436)j)cu Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\ - make `curl --tlsv1` backward compatible (#1672639)
u ^O u h4cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik- fix TFTP receive buffer overflow (CVE-2019-5436)j3cu Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\ - make `curl --tlsv1` backward compatible (#1672639)}2c Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639) 1c1 Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y - prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292) 0wE Jacek Migacz <jmigacz@redhat.com> - 7.29.0-59.el7_9.2eJ&- fix HTTP proxy deny use after free (CVE-2022-43552)
- rebuild certs with 2048-bit RSA keys
:wE Jacek Migacz <jmigacz@redhat.com> - 7.29.0-59.el7_9.2eJ&- fix HTTP proxy deny use after free (CVE-2022-43552)
- rebuild certs with 2048-bit RSA keysv9s} Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)8c' Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^?@- http: free protocol-specific struct in setup_connection callback (#1836773)7c% Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)h6cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]e@- allow curl to POST from a char device (#1769307)|5c Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]?- fix auth failure with duplicated WWW-Authenticate header (#1754736)
A =q' !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556<qA !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651 ;qK !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d- Modify 0250-RHBZ-1610867-rescan-change.patch
* Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651
L L />qo !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
O 0Aqq !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066@q} !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855q?qs !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
+> EqK "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d- Modify 0250-RHBZ-1610867-rescan-change.patch
* Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651}Dq !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901hCqa !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197PBq1 !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
c Gq' "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556FqA "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651
L L /Hqo "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
O 0Kqq "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066Jq} "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855qIqs "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
+> OqA #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651}Nq "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901hMqa "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197PLq1 "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
p p Pq' #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
L L /Qqo #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
O 0Tqq #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066Sq} #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855qRqs #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
+>" YqA $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651Xq= #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}Wq #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901hVqa #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197PUq1 #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
p p Zq' $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
L L /[qo $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
O 0^qq $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066]q} $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855q\qs $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
" +>" bq= $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}aq $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901h`qa $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197P_q1 $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
p p cq' %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
L L /dqo %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
O 0gqq %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066fq} %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855qeqs %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
+>" lq %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905kq= %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}jq %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901hiqa %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197Phq1 %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
p p mq' &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
L L /nqo &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
O 0qqq &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066pq} &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855qoqs &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
+>" vq &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905uq= &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}tq &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901hsqa &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197Prq1 &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
A yq' 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556xqA 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651 wqK 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d- Modify 0250-RHBZ-1610867-rescan-change.patch
* Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651
L L /zqo 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
O 0}qq 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066|q} 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855q{qs 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
+> qK (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d- Modify 0250-RHBZ-1610867-rescan-change.patch
* Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651} q 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901hqa 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197P~q1 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
c q' (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556qA (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651
L L /qo (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
O 0qq (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066q} (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855qqs (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
+> qA )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651}
q (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901h qa (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197Pq1 (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
e r+V: e D5
693e3ce2908adefcc2bc524795b6cde949103c699866ca985fd42a827214dd0eD4
946b8442c4a0e72fe683a8d2c6b3ab7143aa27670b547b3ff7849aa236ae494bD3
aa74fc65a3e070d797d17ec1a51bec20f0c5a1f1ff74f20bd9459369a3b80568D2
18263e1b0a03802679269ba3b6efec82086ba491183c1ab84bd9de4e5a98c071D1
0c9cd97e333e5ea85907e92483ef91dbdb08349b7e29916dcf5c08061c74f836D0
618179611cd44ba685db172d3afd1dc0248e66533a35b8e46cdf118d812340d3D/
6dafcb9ecc7ca14a4ae5417e71c1fee10a7213e0ebf3d3750cbd23a8cacf5eefD.
49776569805f34f9417a664fb394e7bff8444fee386100309ce6306cba1c8b1aD-
3bb0da4f1c883b5aaa0ad687bcc2022ba9573d912ff906b6657bc7e96676c5d9D,
5c0bed31f5ed7d1cccaeb6276746900d9f0fe837b806759153ea696c3b33b423D+
6337008a1e944b28b17317dcde8003b1ccb848dc5a09a17a27903c4e32e60846D*
ab2e63b3fe04a633b718c47d41143f7ffa9fb32076d41cfdb01feaef74cd6158D)
a8bf325bc65d56d5cd74d8b007f3b2f09f0d1f6deccd0c0d0f56f515423fe6eb
p p q' )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
L L /
qo )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
O 0qq )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066q} )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855qqs )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
+>" qA *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d- Modify 0255-RHBZ-1638651-marginal-path.patch
* Fix memory leak
- Resolves: bz #1638651q= )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}q )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901hqa )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197Pq1 )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
p p q' *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
L L /qo *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
O 0qq *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066q} *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855qqs *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
" +>" q= *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462} q *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901h qa *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197Pq1 *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
p p q' +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
L L / qo +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
O 0#qq +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066"q} +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855q!qs +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
+>" (q +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905'q= +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}&q +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901h%qa +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197P$q1 +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
p p )q' ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
* retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
* don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
* Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556
L L /*qo ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
* minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
* recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
* allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
* make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506
O 0-qq ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
* The fix for 1721855 broke 1714506.
- Resolves: bz #17145066,q} ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
* Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855q+qs ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
* only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
* fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
* This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855
+>" 2q ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #21349051q= ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462}0q ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901h/qa ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^A- Add 0270-RHBZ-1775481-segfault-fix.patch
* Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197P.q1 ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
* Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420
_ T _ 7 -Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-3Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild6 -Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-2P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild 5cW -Petr Šabata <contyk@redhat.com> - 0.6.21-1P
- 0.6.21 bump
- A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845)
- Drop the pre-generated docs and introduce a doc subpackage4 -Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.20-2O - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild'3cm -Petr Sabata <psabata@redhat.com> - 0.6.20-1MI@- 0.6.20 bump
- Repackaging prehistoric libexif-docs, introducing version string in filename
- Buildroot cleanup
Yh > .Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.20-2O - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild'=cm .Petr Sabata <psabata@redhat.com> - 0.6.20-1MI@- 0.6.20 bump
- Repackaging prehistoric libexif-docs, introducing version string in filename
- Buildroot cleanup<i! -Richard Hughes <rhughes@redhat.com> - 0.6.22-2_@- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452
- Resolves: #1902589g;u] -Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.22-1^@- Upgrade to 0.6.22
- Resolves: #1841316M:_? -Daniel Mach <dmach@redhat.com> - 0.6.21-6RU- Mass rebuild 2014-01-24M9_? -Daniel Mach <dmach@redhat.com> - 0.6.21-5Rk- Mass rebuild 2013-12-27R8cE -Petr Šabata <contyk@redhat.com> - 0.6.21-4QR@- Run autoreconf for aarch64
D CQ D gEu] .Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.22-1^@- Upgrade to 0.6.22
- Resolves: #1841316MD_? .Daniel Mach <dmach@redhat.com> - 0.6.21-6RU- Mass rebuild 2014-01-24MC_? .Daniel Mach <dmach@redhat.com> - 0.6.21-5Rk- Mass rebuild 2013-12-27RBcE .Petr Šabata <contyk@redhat.com> - 0.6.21-4QR@- Run autoreconf for aarch64A .Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-3Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild@ .Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-2P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild ?cW .Petr Šabata <contyk@redhat.com> - 0.6.21-1P
- 0.6.21 bump
- A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845)
- Drop the pre-generated docs and introduce a doc subpackage
r w/ r J /Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-2P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild IcW /Petr Šabata <contyk@redhat.com> - 0.6.21-1P
- 0.6.21 bump
- A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845)
- Drop the pre-generated docs and introduce a doc subpackageH /Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.20-2O - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild'Gcm /Petr Sabata <psabata@redhat.com> - 0.6.20-1MI@- 0.6.20 bump
- Repackaging prehistoric libexif-docs, introducing version string in filename
- Buildroot cleanupFi! .Richard Hughes <rhughes@redhat.com> - 0.6.22-2_@- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452
- Resolves: #1902589
0 dlx 0 R 0Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.20-2O - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild'Qcm 0Petr Sabata <psabata@redhat.com> - 0.6.20-1MI@- 0.6.20 bump
- Repackaging prehistoric libexif-docs, introducing version string in filename
- Buildroot cleanupPi! /Richard Hughes <rhughes@redhat.com> - 0.6.22-2_@- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452
- Resolves: #1902589gOu] /Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.22-1^@- Upgrade to 0.6.22
- Resolves: #1841316MN_? /Daniel Mach <dmach@redhat.com> - 0.6.21-6RU- Mass rebuild 2014-01-24MM_? /Daniel Mach <dmach@redhat.com> - 0.6.21-5Rk- Mass rebuild 2013-12-27RLcE /Petr Šabata <contyk@redhat.com> - 0.6.21-4QR@- Run autoreconf for aarch64K /Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-3Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
D CQ D gYu] 0Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.22-1^@- Upgrade to 0.6.22
- Resolves: #1841316MX_? 0Daniel Mach <dmach@redhat.com> - 0.6.21-6RU- Mass rebuild 2014-01-24MW_? 0Daniel Mach <dmach@redhat.com> - 0.6.21-5Rk- Mass rebuild 2013-12-27RVcE 0Petr Šabata <contyk@redhat.com> - 0.6.21-4QR@- Run autoreconf for aarch64U 0Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-3Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildT 0Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-2P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild ScW 0Petr Šabata <contyk@redhat.com> - 0.6.21-1P
- 0.6.21 bump
- A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845)
- Drop the pre-generated docs and introduce a doc subpackage
r w/ r ^ 1Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-2P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild ]cW 1Petr Šabata <contyk@redhat.com> - 0.6.21-1P
- 0.6.21 bump
- A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845)
- Drop the pre-generated docs and introduce a doc subpackage\ 1Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.20-2O - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild'[cm 1Petr Sabata <psabata@redhat.com> - 0.6.20-1MI@- 0.6.20 bump
- Repackaging prehistoric libexif-docs, introducing version string in filename
- Buildroot cleanupZi! 0Richard Hughes <rhughes@redhat.com> - 0.6.22-2_@- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452
- Resolves: #1902589
dlx
ee1 2Lukas Nykryn <lnykryn@redhat.com> - 219-73.1]@- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)di! 1Richard Hughes <rhughes@redhat.com> - 0.6.22-2_@- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452
- Resolves: #1902589gcu] 1Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.22-1^@- Upgrade to 0.6.22
- Resolves: #1841316Mb_? 1Daniel Mach <dmach@redhat.com> - 0.6.21-6RU- Mass rebuild 2014-01-24Ma_? 1Daniel Mach <dmach@redhat.com> - 0.6.21-5Rk- Mass rebuild 2013-12-27R`cE 1Petr Šabata <contyk@redhat.com> - 0.6.21-4QR@- Run autoreconf for aarch64_ 1Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-3Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
< g / 2systemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)?f u 2systemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K- core: when restarting services, don't close fds (#1803802)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
- tests: add basic journal test (#1803802)
- tests: add regression test for `systemctl restart systemd-journald` (#1803802)
- tests: add test that journald keeps fds over termination by signal (#1803802) #&57704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)
/ 4 / 9km 2systemd maintenance team <systemd-maint@redhat.com> - 219-77^- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)Qj 2systemd maintenance team <systemd-maint@redhat.com> - 219-76^lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)miW 2systemd maintenance team <systemd-maint@redhat.com> - 219-75^l@- journal: break recursion (#1778744);hq 2systemd maintenance team <systemd-maint@redhat.com> - 219-74^- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#17 #% bR #xRY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ "b "c "d "g "l "m # n #q #v #y #z #} # # # # #
# #
# # # # # # # # ## #( #) #* #- #2 # 7 # > # E # J # R #!Y #"^ ##e #$g #'k #)o #*q #-u #.x #/z #2~ #3 #4 #7 #8 #< #= #> #A #B #C$ #D' #E- #F0 #G5 #H8 #I= #JA #KF #LJ #MN #PR #QU #TY #U\ #V^ #Yb #Zf #[h #^l #_p #bt #cx #d{ #g #h #i #j #k #m #n #o #p! #q% #r* #s2 #t; #uD #vM #wU
.
oe1 3Lukas Nykryn <lnykryn@redhat.com> - 219-73.1]@- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)n 2systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)Xm ' 2systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)flI 2systemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816)
< q / 3systemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)?p u 3systemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K- core: when restarting services, don't close fds (#1803802)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
- tests: add basic journal test (#1803802)
- tests: add regression test for `systemctl restart systemd-journald` (#1803802)
- tests: add test that journald keeps fds over termination by signal (#1803802) #,57704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)
/ 4 / 9um 3systemd maintenance team <systemd-maint@redhat.com> - 219-77^- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)Qt 3systemd maintenance team <systemd-maint@redhat.com> - 219-76^lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)msW 3systemd maintenance team <systemd-maint@redhat.com> - 219-75^l@- journal: break recursion (#1778744);rq 3systemd maintenance team <systemd-maint@redhat.com> - 219-74^- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#17 #+
. . x 3systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)Xw ' 3systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)fvI 3systemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816)
< z / 4systemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)?y u 4systemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K- core: when restarting services, don't close fds (#1803802)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
- tests: add basic journal test (#1803802)
- tests: add regression test for `systemctl restart systemd-journald` (#1803802)
- tests: add test that journald keeps fds over termination by signal (#1803802) #157704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)
/ 4 / 9~m 4systemd maintenance team <systemd-maint@redhat.com> - 219-77^- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)Q} 4systemd maintenance team <systemd-maint@redhat.com> - 219-76^lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)m|W 4systemd maintenance team <systemd-maint@redhat.com> - 219-75^l@- journal: break recursion (#1778744);{q 4systemd maintenance team <systemd-maint@redhat.com> - 219-74^- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#17 #0
.
4systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`- core: Detect initial timer state from serialized data (#1764908) 4systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)X ' 4systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)fI 4systemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816)
< / 5systemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)? u 5systemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K- core: when restarting services, don't close fds (#1803802)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
- tests: add basic journal test (#1803802)
- tests: add regression test for `systemctl restart systemd-journald` (#1803802)
- tests: add test that journald keeps fds over termination by signal (#1803802) #657704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)
/ 4 / 9m 5systemd maintenance team <systemd-maint@redhat.com> - 219-77^- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)Q 5systemd maintenance team <systemd-maint@redhat.com> - 219-76^lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)mW 5systemd maintenance team <systemd-maint@redhat.com> - 219-75^l@- journal: break recursion (#1778744);q 5systemd maintenance team <systemd-maint@redhat.com> - 219-74^- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#17 #5
.
5systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`- core: Detect initial timer state from serialized data (#1764908) 5systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)X
' 5systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)f I 5systemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816)
e r+V: e DB
80b9e73c5db5a194278ac3415303dcf5c49c780dae020e15b55a65a9e02f2a56DA
c5512bfc8f5d17195d34252e20dd34ef75e390d9bb8a38b30ba8be4e5c0904adD@
dcccb19275e44c98b220ff45b313949c6d1e421f5326c9e3d8f568c1ae986c15D?
894926755bf0b5caaf2195043acd56dcc5dc992c1c51411a5e923a6e2e1d55cbD>
a8d6b71da3251c0921f8f1c9a527fe6468bab3f326f472567681e24f3f9bbd61D=
02f065f8fc1a7dad64b3db9dce1c2acf7f0fdb727133ffef1c209fa011adbcd6D<
841781e279649ca9fced8e74583d9a30e6d5e96023b689f339cd0c6814f8a746D;
30f73d4f8a1abd8421100fbb68de1f107a838a542bb020b5e22316b330a1560cD:
f111af81b1171cde02cdf42152cd2cf0b250c9a755cff39952df38908f7a55f8D9
126385b940d5f6f201b6b30130139b0125b1d44dc7842c59cc7cbba5a9a4404dD8
3aa88d01f6198efa435e94380ac7bb30d03f89a522b7860137a566276cea51c9D7
1ee43730cfd6c1751ff45f321c91c0f0965e683e47cb52b91f87ac210ed93c1aD6
de11efb648c50dca4022b29c14b4bc06fdcb8f36be5009d20018c917583af9bc #;57704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)
/ 4 / 9m 6systemd maintenance team <systemd-maint@redhat.com> - 219-77^- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)Q 6systemd maintenance team <systemd-maint@redhat.com> - 219-76^lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)mW 6systemd maintenance team <systemd-maint@redhat.com> - 219-75^l@- journal: break recursion (#1778744);
q 6systemd maintenance team <systemd-maint@redhat.com> - 219-74^- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#17 #:
.
6systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`- core: Detect initial timer state from serialized data (#1764908) 6systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)X ' 6systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)fI 6systemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816)
\ ( \ ;q 7systemd maintenance team <systemd-maint@redhat.com> - 219-74^- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#17 #?. S 6systemd maintenance team <systemd-maint@redhat.com> - 219-78.5a@- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361) 7 6systemd maintenance team <systemd-maint@redhat.com> - 219-78.4a- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758) #@57704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)
X ' 7systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)fI 7systemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816)9m 7systemd maintenance team <systemd-maint@redhat.com> - 219-77^- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)Q 7systemd maintenance team <systemd-maint@redhat.com> - 219-76^lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)mW 7systemd maintenance team <systemd-maint@redhat.com> - 219-75^l@- journal: break recursion (#1778744)
u 7 7systemd maintenance team <systemd-maint@redhat.com> - 219-78.4a- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)
7systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`- core: Detect initial timer state from serialized data (#1764908) 7systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)
r MwO r X$ ' 8systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)f#I 8systemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816)9"m 8systemd maintenance team <systemd-maint@redhat.com> - 219-77^- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)Q! 8systemd maintenance team <systemd-maint@redhat.com> - 219-76^l@- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291). S 7systemd maintenance team <systemd-maint@redhat.com> - 219-78.5a@- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)
u ' 7 8systemd maintenance team <systemd-maint@redhat.com> - 219-78.4a- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)
& 8systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`- core: Detect initial timer state from serialized data (#1764908)% 8systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)
0 M.X 0 f-I 9systemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816)9,m 9systemd maintenance team <systemd-maint@redhat.com> - 219-77^- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)Q+ 9systemd maintenance team <systemd-maint@redhat.com> - 219-76^l@- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)
* 8systemd maintenance team <systemd-maint@redhat.com> - 219-78.7b- resolve: introduce reference counting on DnsStream (#2110544) )
8systemd maintenance team <systemd-maint@redhat.com> - 219-78.6b- resolved: pin stream while calling callbacks for it (#2110544).( S 8systemd maintenance team <systemd-maint@redhat.com> - 219-78.5a@- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)
#
0 9systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`- core: Detect initial timer state from serialized data (#1764908)/ 9systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)X. ' 9systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)
( f5I :systemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816)
4 9systemd maintenance team <systemd-maint@redhat.com> - 219-78.7b- resolve: introduce reference counting on DnsStream (#2110544) 3
9systemd maintenance team <systemd-maint@redhat.com> - 219-78.6b- resolved: pin stream while calling callbacks for it (#2110544).2 S 9systemd maintenance team <systemd-maint@redhat.com> - 219-78.5a@- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361) 1 7 9systemd maintenance team <systemd-maint@redhat.com> - 219-78.4a- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)
#
8 :systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`- core: Detect initial timer state from serialized data (#1764908)7 :systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)X6 ' :systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)
u ( u = :systemd maintenance team <systemd-maint@redhat.com> - 219-78.8e- fstab-generator: Chase symlinks where possible (#6293) (RHEL-6223)
< :systemd maintenance team <systemd-maint@redhat.com> - 219-78.7b- resolve: introduce reference counting on DnsStream (#2110544) ;
:systemd maintenance team <systemd-maint@redhat.com> - 219-78.6b- resolved: pin stream while calling callbacks for it (#2110544).: S :systemd maintenance team <systemd-maint@redhat.com> - 219-78.5a@- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361) 9 7 :systemd maintenance team <systemd-maint@redhat.com> - 219-78.4a- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)
b A ;systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)X@ ' ;systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)f?I ;systemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816)> ) :systemd maintenance team <systemd-maint@redhat.com> - 219-78.9e]@- Revert "fstab-generator: Chase symlinks where possible (#6293)" (RHEL-17164)
w nI w
F ;systemd maintenance team <systemd-maint@redhat.com> - 219-78.7b- resolve: introduce reference counting on DnsStream (#2110544) E
;systemd maintenance team <systemd-maint@redhat.com> - 219-78.6b- resolved: pin stream while calling callbacks for it (#2110544).D S ;systemd maintenance team <systemd-maint@redhat.com> - 219-78.5a@- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361) C 7 ;systemd maintenance team <systemd-maint@redhat.com> - 219-78.4a- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)
B ;systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`- core: Detect initial timer state from serialized data (#1764908)
{ l? { ?J u <systemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K- core: when restarting services, don't close fds (#1803802)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
- tests: add basic journal test (#1803802)
- tests: add regression test for `systemctl restart systemd-journald` (#1803802)
- tests: add test that journald keeps fds over termination by signal (#1803802)
Ie1 <Lukas Nykryn <lnykryn@redhat.com> - 219-73.1]@- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)H ) ;systemd maintenance team <systemd-maint@redhat.com> - 219-78.9e]@- Revert "fstab-generator: Chase symlinks where possible (#6293)" (RHEL-17164)G ;systemd maintenance team <systemd-maint@redhat.com> - 219-78.8e- fstab-generator: Chase symlinks where possible (#6293) (RHEL-6223)
L _" L QN <systemd maintenance team <systemd-maint@redhat.com> - 219-76^lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)mMW <systemd maintenance team <systemd-maint@redhat.com> - 219-75^l@- journal: break recursion (#1778744);Lq <systemd maintenance team <systemd-maint@redhat.com> - 219-74^- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#17 #N K / <systemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`- journal: do not trigger assertion when journal_file_close() get NULL (#1807798) #O57704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)
p B p R <systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)XQ ' <systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)fPI <systemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816)9Om <systemd maintenance team <systemd-maint@redhat.com> - 219-77^- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)
q U / =systemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)?T u =systemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K- core: when restarting services, don't close fds (#1803802)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
- tests: add basic journal test (#1803802)
- tests: add regression test for `systemctl restart systemd-journald` (#1803802)
- tests: add test that journald keeps fds over termination by signal (#1803802)
Se1 =Lukas Nykryn <lnykryn@redhat.com> - 219-73.1]@- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) #S57704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)
/ 4 / 9Ym =systemd maintenance team <systemd-maint@redhat.com> - 219-77^- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)QX =systemd maintenance team <systemd-maint@redhat.com> - 219-76^lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)mWW =systemd maintenance team <systemd-maint@redhat.com> - 219-75^l@- journal: break recursion (#1778744);Vq =systemd maintenance team <systemd-maint@redhat.com> - 219-74^- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#17 #R
. . \ =systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)X[ ' =systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)fZI =systemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816)
< ^ / >systemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)?] u >systemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K- core: when restarting services, don't close fds (#1803802)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
- tests: add basic journal test (#1803802)
- tests: add regression test for `systemctl restart systemd-journald` (#1803802)
- tests: add test that journald keeps fds over termination by signal (#1803802) #X57704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)
/ 4 / 9bm >systemd maintenance team <systemd-maint@redhat.com> - 219-77^- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)Qa >systemd maintenance team <systemd-maint@redhat.com> - 219-76^lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)m`W >systemd maintenance team <systemd-maint@redhat.com> - 219-75^l@- journal: break recursion (#1778744);_q >systemd maintenance team <systemd-maint@redhat.com> - 219-74^- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#17 #W
.
f >systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`- core: Detect initial timer state from serialized data (#1764908)e >systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)Xd ' >systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)fcI >systemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816)
< h / ?systemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)?g u ?systemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K- core: when restarting services, don't close fds (#1803802)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
- tests: add basic journal test (#1803802)
- tests: add regression test for `systemctl restart systemd-journald` (#1803802)
- tests: add test that journald keeps fds over termination by signal (#1803802) #]57704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)
/ 4 / 9lm ?systemd maintenance team <systemd-maint@redhat.com> - 219-77^- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)Qk ?systemd maintenance team <systemd-maint@redhat.com> - 219-76^lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)mjW ?systemd maintenance team <systemd-maint@redhat.com> - 219-75^l@- journal: break recursion (#1778744);iq ?systemd maintenance team <systemd-maint@redhat.com> - 219-74^- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#17 #\
.
p ?systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`- core: Detect initial timer state from serialized data (#1764908)o ?systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)Xn ' ?systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)fmI ?systemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816) #a57704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)
/ 4 / 9tm @systemd maintenance team <systemd-maint@redhat.com> - 219-77^- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)Qs @systemd maintenance team <systemd-maint@redhat.com> - 219-76^lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)mrW @systemd maintenance team <systemd-maint@redhat.com> - 219-75^l@- journal: break recursion (#1778744);qq @systemd maintenance team <systemd-maint@redhat.com> - 219-74^- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#17 #`
.
x @systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`- core: Detect initial timer state from serialized data (#1764908)w @systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)Xv ' @systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)fuI @systemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816)
\ ( \ ;{q Asystemd maintenance team <systemd-maint@redhat.com> - 219-74^- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#17 #e.z S @systemd maintenance team <systemd-maint@redhat.com> - 219-78.5a@- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361) y 7 @systemd maintenance team <systemd-maint@redhat.com> - 219-78.4a- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758) #f57704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)
X ' Asystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)fI Asystemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816)9~m Asystemd maintenance team <systemd-maint@redhat.com> - 219-77^- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)Q} Asystemd maintenance team <systemd-maint@redhat.com> - 219-76^lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)m|W Asystemd maintenance team <systemd-maint@redhat.com> - 219-75^l@- journal: break recursion (#1778744)
u 7 Asystemd maintenance team <systemd-maint@redhat.com> - 219-78.4a- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)
Asystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`- core: Detect initial timer state from serialized data (#1764908) Asystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)
r MwO r X ' Bsystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)fI Bsystemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816)9m Bsystemd maintenance team <systemd-maint@redhat.com> - 219-77^- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)Q Bsystemd maintenance team <systemd-maint@redhat.com> - 219-76^l@- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291). S Asystemd maintenance team <systemd-maint@redhat.com> - 219-78.5a@- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)
u 7 Bsystemd maintenance team <systemd-maint@redhat.com> - 219-78.4a- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)
Bsystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`- core: Detect initial timer state from serialized data (#1764908) Bsystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)
0 M.X 0 fI Csystemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816)9m Csystemd maintenance team <systemd-maint@redhat.com> - 219-77^- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)Q Csystemd maintenance team <systemd-maint@redhat.com> - 219-76^l@- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)
Bsystemd maintenance team <systemd-maint@redhat.com> - 219-78.7b- resolve: introduce reference counting on DnsStream (#2110544)
Bsystemd maintenance team <systemd-maint@redhat.com> - 219-78.6b- resolved: pin stream while calling callbacks for it (#2110544). S Bsystemd maintenance team <systemd-maint@redhat.com> - 219-78.5a@- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)
e r+V: e DO
1db80fc0b7ec4ad66d1f7b86e831c3ed4d4386b1db1558cc7afcecf08ff5184eDN
5cf5d9d1af4c78ca14d14daa45c998d5f75484a3ab878d4a4e8caae845ff0c1dDM
551d2065c265d1e53d4bec46b49874d3aff2ccc0e5b50f98b64fb49c31c77700DL
54d67315041544440edcdc1a784b786f749cce152edd23d3ed953826b64a5b3bDK
7ae732734ae47230b9ee78bd90d72d963f85df5663e2f2ce2377f9f040e2ced7DJ
d91245d56499e00006afb5caef9f595c26917df6d3112f9952a0e2b928994342DI
565a99b9e94164785e21e6c316bc072e35df5c03df3267601461e2b96157b0f9DH
fc6296617d74745ac75f51e708264f5e77144e1a594d2ddfaadc84e9d9d9624dDG
ca42c81542be47ee686bcb3662bdb26e91f2fa0041534bf807e0b9294dcae15aDF
1409a93de8f33913e0adaf61bf58a25d2d2e6253e503e532e910519107835c33DE
df76a933cd54ed2e60e4eacb34639d343d8e273926033d63c3e9f0090215673eDD
c7963550f0e18a7fdd4139bb7942c93b0a9cffc5bec4e5833552b722e442120fDC
0d7fa70d37741c62bde710cf842f10260cf261673a4a7408c061b0e28d2bc955
#
Csystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`- core: Detect initial timer state from serialized data (#1764908) Csystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)X ' Csystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)
( fI Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816)
Csystemd maintenance team <systemd-maint@redhat.com> - 219-78.7b- resolve: introduce reference counting on DnsStream (#2110544)
Csystemd maintenance team <systemd-maint@redhat.com> - 219-78.6b- resolved: pin stream while calling callbacks for it (#2110544). S Csystemd maintenance team <systemd-maint@redhat.com> - 219-78.5a@- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361) 7 Csystemd maintenance team <systemd-maint@redhat.com> - 219-78.4a- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)
#
Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`- core: Detect initial timer state from serialized data (#1764908) Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)X ' Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)
u ( u ! Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.8e- fstab-generator: Chase symlinks where possible (#6293) (RHEL-6223)
Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.7b- resolve: introduce reference counting on DnsStream (#2110544)
Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.6b- resolved: pin stream while calling callbacks for it (#2110544). S Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.5a@- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361) 7 Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.4a- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)
b % Esystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)X$ ' Esystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)f#I Esystemd maintenance team <systemd-maint@redhat.com> - 219-78^- avoid double free (#1832816)" ) Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.9e]@- Revert "fstab-generator: Chase symlinks where possible (#6293)" (RHEL-17164)
w nI w
* Esystemd maintenance team <systemd-maint@redhat.com> - 219-78.7b- resolve: introduce reference counting on DnsStream (#2110544) )
Esystemd maintenance team <systemd-maint@redhat.com> - 219-78.6b- resolved: pin stream while calling callbacks for it (#2110544).( S Esystemd maintenance team <systemd-maint@redhat.com> - 219-78.5a@- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361) ' 7 Esystemd maintenance team <systemd-maint@redhat.com> - 219-78.4a- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)
& Esystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`- core: Detect initial timer state from serialized data (#1764908)
I lf* I {2i FRichard Hughes <rhughes@redhat.com> - 3.28.1-2[#@- Backport a patch to fix a gnome-shell crash
- Related: #1569295^1e[ FKalev Lember <klember@redhat.com> - 3.28.1-1Z- Update to 3.28.1
- Resolves: #1569295c0qY FFlorian Müllner <fmuellner@redhat.com> - 3.26.0-1Y- Update to 3.26.0
- Related: #1481381^/e[ FKalev Lember <klember@redhat.com> - 3.20.4-1XbW- Update to 3.20.4
- Resolves: #1387009o.e} FKalev Lember <klember@redhat.com> - 3.14.1-3W- Switch to new METAR data provider
- Resolves: #1371550d-ka FMatthias Clasen <mclasen@redhat.com> - 3.14.1-2Wv[@- Update translations
Resolves: #1304249, ) Esystemd maintenance team <systemd-maint@redhat.com> - 219-78.9e]@- Revert "fstab-generator: Chase symlinks where possible (#6293)" (RHEL-17164)+ Esystemd maintenance team <systemd-maint@redhat.com> - 219-78.8e- fstab-generator: Chase symlinks where possible (#6293) (RHEL-6223)
; Af ; ^;e[ GKalev Lember <klember@redhat.com> - 3.28.1-1Z- Update to 3.28.1
- Resolves: #1569295c:qY GFlorian Müllner <fmuellner@redhat.com> - 3.26.0-1Y- Update to 3.26.0
- Related: #1481381^9e[ GKalev Lember <klember@redhat.com> - 3.20.4-1XbW- Update to 3.20.4
- Resolves: #1387009o8e} GKalev Lember <klember@redhat.com> - 3.14.1-3W- Switch to new METAR data provider
- Resolves: #1371550d7ka GMatthias Clasen <mclasen@redhat.com> - 3.14.1-2Wv[@- Update translations
Resolves: #1304249s6uu FMichael Catanzaro <mcatanzaro@redhat.com> - 3.28.2-4`Y@- Fix no weather data available
- Resolves: #1938275c5]m FDavid King <dking@redhat.com> - 3.28.2-3]>- Fix multilib conflict in subpackage (#1623538){4o FDebarshi Ray <rishi@fedoraproject.org> - 3.28.2-2[l,- Fix dangling symbolic link to README.md
- Resolves: #1569295^3e[ FKalev Lember <klember@redhat.com> - 3.28.2-1[a- Update to 3.28.2
- Resolves: #1569295
9Z cDqY HFlorian Müllner <fmuellner@redhat.com> - 3.26.0-1Y- Update to 3.26.0
- Related: #1481381^Ce[ HKalev Lember <klember@redhat.com> - 3.20.4-1XbW- Update to 3.20.4
- Resolves: #1387009oBe} HKalev Lember <klember@redhat.com> - 3.14.1-3W- Switch to new METAR data provider
- Resolves: #1371550dAka HMatthias Clasen <mclasen@redhat.com> - 3.14.1-2Wv[@- Update translations
Resolves: #1304249s@uu GMichael Catanzaro <mcatanzaro@redhat.com> - 3.28.2-4`Y@- Fix no weather data available
- Resolves: #1938275c?]m GDavid King <dking@redhat.com> - 3.28.2-3]>- Fix multilib conflict in subpackage (#1623538){>o GDebarshi Ray <rishi@fedoraproject.org> - 3.28.2-2[l,- Fix dangling symbolic link to README.md
- Resolves: #1569295^=e[ GKalev Lember <klember@redhat.com> - 3.28.2-1[a- Update to 3.28.2
- Resolves: #1569295{<i GRichard Hughes <rhughes@redhat.com> - 3.28.1-2[#@- Backport a patch to fix a gnome-shell crash
- Related: #1569295
# >` # ^Me[ IKalev Lember <klember@redhat.com> - 3.20.4-1XbW- Update to 3.20.4
- Resolves: #1387009oLe} IKalev Lember <klember@redhat.com> - 3.14.1-3W- Switch to new METAR data provider
- Resolves: #1371550dKka IMatthias Clasen <mclasen@redhat.com> - 3.14.1-2Wv[@- Update translations
Resolves: #1304249sJuu HMichael Catanzaro <mcatanzaro@redhat.com> - 3.28.2-4`Y@- Fix no weather data available
- Resolves: #1938275cI]m HDavid King <dking@redhat.com> - 3.28.2-3]>- Fix multilib conflict in subpackage (#1623538){Ho HDebarshi Ray <rishi@fedoraproject.org> - 3.28.2-2[l,- Fix dangling symbolic link to README.md
- Resolves: #1569295^Ge[ HKalev Lember <klember@redhat.com> - 3.28.2-1[a- Update to 3.28.2
- Resolves: #1569295{Fi HRichard Hughes <rhughes@redhat.com> - 3.28.1-2[#@- Backport a patch to fix a gnome-shell crash
- Related: #1569295^Ee[ HKalev Lember <klember@redhat.com> - 3.28.1-1Z- Update to 3.28.1
- Resolves: #1569295
< 7Vp < 8UY JJarod Wilson <jarod@redhat.com> 22.1-1\e- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274sTuu IMichael Catanzaro <mcatanzaro@redhat.com> - 3.28.2-4`Y@- Fix no weather data available
- Resolves: #1938275cS]m IDavid King <dking@redhat.com> - 3.28.2-3]>- Fix multilib conflict in subpackage (#1623538){Ro IDebarshi Ray <rishi@fedoraproject.org> - 3.28.2-2[l,- Fix dangling symbolic link to README.md
- Resolves: #1569295^Qe[ IKalev Lember <klember@redhat.com> - 3.28.2-1[a- Update to 3.28.2
- Resolves: #1569295{Pi IRichard Hughes <rhughes@redhat.com> - 3.28.1-2[#@- Backport a patch to fix a gnome-shell crash
- Related: #1569295^Oe[ IKalev Lember <klember@redhat.com> - 3.28.1-1Z- Update to 3.28.1
- Resolves: #1569295cNqY IFlorian Müllner <fmuellner@redhat.com> - 3.26.0-1Y- Update to 3.26.0
- Related: #1481381
po b[[m JHonggang Li <honli@redhat.com> - 22.4-3^@- Restore three patches
- Resolves: rhbz#1817412
Z[; JHonggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585VYYU JJarod Wilson <jarod@redhat.com> 22.4-1]|@- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296 XY) JJarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541xWY JJarod Wilson <jarod@redhat.com> 22.1-3\- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426 VY? JJarod Wilson <jarod@redhat.com> 22.1-2\- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426
| qE | xaY KJarod Wilson <jarod@redhat.com> 22.1-3\- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426 `Y? KJarod Wilson <jarod@redhat.com> 22.1-2\- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#16874268_Y KJarod Wilson <jarod@redhat.com> 22.1-1\e- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274^[O JHonggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699][C JHonggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221
\[; JHonggang Li <honli@redhat.com> - 22.4-4^- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482
{ g[C KHonggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221
f[; KHonggang Li <honli@redhat.com> - 22.4-4^- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482be[m KHonggang Li <honli@redhat.com> - 22.4-3^@- Restore three patches
- Resolves: rhbz#1817412
d[; KHonggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585VcYU KJarod Wilson <jarod@redhat.com> 22.4-1]|@- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296 bY) KJarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541
> g > VmYU LJarod Wilson <jarod@redhat.com> 22.4-1]|@- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296 lY) LJarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541xkY LJarod Wilson <jarod@redhat.com> 22.1-3\- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426 jY? LJarod Wilson <jarod@redhat.com> 22.1-2\- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#16874268iY LJarod Wilson <jarod@redhat.com> 22.1-1\e- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274h[O KHonggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699
q |P 8sY MJarod Wilson <jarod@redhat.com> 22.1-1\e- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274r[O LHonggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699q[C LHonggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221
p[; LHonggang Li <honli@redhat.com> - 22.4-4^- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482bo[m LHonggang Li <honli@redhat.com> - 22.4-3^@- Restore three patches
- Resolves: rhbz#1817412
n[; LHonggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585
po by[m MHonggang Li <honli@redhat.com> - 22.4-3^@- Restore three patches
- Resolves: rhbz#1817412
x[; MHonggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585VwYU MJarod Wilson <jarod@redhat.com> 22.4-1]|@- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296 vY) MJarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541xuY MJarod Wilson <jarod@redhat.com> 22.1-3\- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426 tY? MJarod Wilson <jarod@redhat.com> 22.1-2\- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426
| qE | xY NJarod Wilson <jarod@redhat.com> 22.1-3\- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426 ~Y? NJarod Wilson <jarod@redhat.com> 22.1-2\- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#16874268}Y NJarod Wilson <jarod@redhat.com> 22.1-1\e- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274|[O MHonggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699{[C MHonggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221
z[; MHonggang Li <honli@redhat.com> - 22.4-4^- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482
{ [C NHonggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221
[; NHonggang Li <honli@redhat.com> - 22.4-4^- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482b[m NHonggang Li <honli@redhat.com> - 22.4-3^@- Restore three patches
- Resolves: rhbz#1817412
[; NHonggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585VYU NJarod Wilson <jarod@redhat.com> 22.4-1]|@- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296 Y) NJarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541
g
o' OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper targetTo; OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z][O NHonggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699
2 ow OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target|
o OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))t o{ OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
" " Y oE OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : A
o OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -om OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
| To; PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] qO OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is downo OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
e r+V: e D\
ecf00639a05e5928c699eb7451b91c04ef62ea4e3ada1c96ee6c9ba35c065f28D[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 qx w |o PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))to{ PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
o' PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target
2ow PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " YoE PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : Ao PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -om PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
I | I
o' QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target qO PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is downo PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
2 ow QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target| o QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))t o{ QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
" " Y oE QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : A o QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -!om QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? $q9 QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) #qO QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down"o QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
w qx w |'o RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))t&o{ RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
%o' RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target
2(ow RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " Y)oE RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : A*o RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -+om RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? .q9 RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) -qO RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down,o RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
21ow SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target|0o SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))t/o{ SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
" " Y2oE SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : A3o SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -4om SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? 7q9 SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) 6qO SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down5o SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
|:o TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))t9o{ TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)h8qa SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
2;ow TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " Y<oE TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : A=o TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N ->om TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? Aq9 TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) @qO TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down?o TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
[ [ 2Dow UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target|Co UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))hBqa TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
" " YEoE UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] bR #RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ #ya #zg #{m #|s #}y #~ # # # # #
# # # # # # # # # # # #! #$ #' #( #) #* #+ #. #1 #2 #3 #4 #7 #: #; #< #= #> #A #D #E #F #G #J #M #N #O #P #Q #T #W #X #Y #Z #] #` #a #b #c #d #g #j #k #l #m #p #s #t #u #v #Áw #āz #Ł} #Ɓ #ǁ #ȁ #Ɂ #ʁ #ˁ
#́
#́ # #Ё #с #ҁ #Ӂ #ԁ #Ձ" #ց% #ׁ( #+ #ف. #ځ/ #ہ0 #܁3 #݁5
: : AFo UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -Gom UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? Jq9 UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) IqO UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is downHo UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
|Mo VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))|Lq UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]hKqa UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
2Now VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " YOoE VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : APo VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -Qom VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? Tq9 VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) SqO VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is downRo VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
[ [ 2Wow WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target|Vq VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]hUqa VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
" " YXoE WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : AYo WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -Zom WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? ]q9 WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) \qO WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down[o WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
m m `qQ WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]|_q WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]h^qa WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
2aow XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " YboE XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : Aco XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -dom XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? gq9 XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) fqO XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is downeo XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
m m jqQ XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]|iq XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]hhqa XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
" " YkoE YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : Alo YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -mom YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? pq9 YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) oqO YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is downno YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
m m sqQ YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]|rq YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]hqqa YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
=tq YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c
@- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]
" " YuoE ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : Avo ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -wom ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? zq9 ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) yqO ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is downxo ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
m m }qQ ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]||q ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]h{qa ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
Ao [Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]=~q ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c
@- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]
N N - om [Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? q9 [Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) qO [Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is downo [Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
m m qQ [Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]|q [Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]hqa [Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
/ / A o \Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]D}
[Eduardo Lima (Etrunko) <etrunko@redhat.com> 1.16.5-10.16eV@- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]=q [Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c
@- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]
N N -
om \Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ?
q9 \Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) qO \Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down o \Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
m m qQ \Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]|q \Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]hqa \Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
.a} ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screenD}
\Eduardo Lima (Etrunko) <etrunko@redhat.com> 1.16.5-10.16eV@- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]=q \Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c
@- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]
e r+V: e Di
b4bb4d388af0708a559cf09c5a7fc75ab89a349115729620b72c790f28e7422eDh
9ebd06e0dbe03a1b81d2bb45598fa8b2a8423c754eb01c2dc19009b37889af7dDg
ac082581e82346ea696427fe38a4a1ad08c1a2f428d21c026da32d80aa0c4cfeDf
79b1198c3958d0c5aaf003eb2c5f482ad658aac62e3b7fe05127e6498153d891De
9ddb3989f547bec0175c3f866ce77a6ac4742203e5567fcd03af76e451568f49Dd
6e22c4b0aee7e9979b7f739d1db74f8609f8f27a72d28c139c4b20648516c712Dc
3cfc9f52a00f0406e2e427948342a30ca2cd4762712b56ebee9d8bf24018e163Db
720ce08cb7d09fef55e566296d6985f0a465fbdb1a66bfda747f53f178f67f3aDa
4168f549a1eed91719335c29e0efff79a7747ffbbdf777b56e435e5123a039a7D`
0f725b790a384924e7b95b0b06d3009171c8060554b98e9cc285dabe9c324930D_
75cdb68690a46ab40f6949579f2ea4df2f3e811398a7dcefb77813e87272e899D^
d787f263d801d560eb3933a597fbdb2f4eb89a55b5cd49730ab0dc795715c028D]
9c3d41d6041f9bdd8e0938ed6e0638aa29653f13b1631dd40dfbcc0dce9adc28
T ta ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization)as ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
It is done in two steps (two different nsupdate messages).ya ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.
Pg; ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]_c] ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^3- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False
u xg ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))pg{ ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)g' ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target
y a ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.. a} ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen. gw ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
R t a ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization) as ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
It is done in two steps (two different nsupdate messages).
P"g; ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]_!c] ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^3- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False
u x%g ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))p$g{ ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)#g' ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target
-(is _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
It is done in two steps (two different nsupdate messages).}'i _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process..&gw ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
C C T+o; _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]c*k] _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^3- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex)i _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization
w qx w |.o _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))t-o{ _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
,o' _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target
2/ow _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " Y0oE _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
L x3i `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization-2is `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
It is done in two steps (two different nsupdate messages).}1i `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.
T5o; `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]c4k] `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^3- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False
w qx w |8o `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))t7o{ `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
6o' `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target
29ow `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " Y:oE `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
N x<i aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization-;is aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-8^V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
It is done in two steps (two different nsupdate messages).
T>o; aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]c=k] aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^3- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False
w qx w |Ao aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))t@o{ aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
?o' aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target
2Bow aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " YCoE aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: -Eis bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-8^V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
It is done in two steps (two different nsupdate messages).ADo aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
C C THo; bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]cGk] bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^3- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is FalsexFi bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization
w qx w |Ko bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))tJo{ bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
Io' bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target
2Low bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " YMoE bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: xOi cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 LocalizationANo bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
TQo; cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]cPk] cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^3- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False
w qx w |To cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))tSo{ cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
Ro' cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target
2Uow cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " YVoE cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : AWo cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N xYi dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization-Xom cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
T[o; dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]cZk] dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^3- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False
w qx w |^o dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))t]o{ dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
\o' dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target
2_ow dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " Y`oE dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : Aao dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -bom dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
teo{ eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
do' eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper targetTco; eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
2gow eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target|fo eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
" " YhoE eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : Aio eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -jom eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
| Tmo; fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] lqO eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is downko eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
w qx w |po fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))too{ fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
no' fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target
2qow fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " YroE fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : Aso fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -tom fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
I | I
wo' gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target vqO fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is downuo fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
2zow gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target|yo gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))txo{ gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
" " Y{oE gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : A|o gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -}om gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? q9 gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) qO gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down~o gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
w qx w |o hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))to{ hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
o' hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target bR $CRY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ #߁9 #: #< #> #A #B #C #E #H #K #L #M #O #Q #T #U #V #W #Y #[ #^ #_ #` #a #b #e #g #h #i #j #m #p #q $ r $s $t $w $z ${ $| $} $ $ $ $ $
$ $
$
$ $ $ $ $ $ $ $ $ $ $ $ ! $ " $ # $ & $!) $"* $#+ $$, $%- $&0 $'3 $(4 $)5 $*6 $+9 $,< $-= $.> $/? $0@ $1C $2F $3G $4H $5I $6L $7O $8P $9Q $:R $;S $<V $=Y $>[ $?\ $@_ $Ab $Be
2ow hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " YoE hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : Ao hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -om hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ?
q9 hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) qO hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is downo hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
2
ow iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target| o iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))t o{ iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
" " YoE iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : Ao iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -om iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? q9 iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) qO iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is downo iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
|o jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))to{ jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)hqa iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
e r+V: e Dv
33522ef6344e2c23c9585439f96860fbac64c8059e3fafe85e39f00d654826beDu
676257fa89a2415e1fed624878b0d5c3f3c334c139f75c44938d08415b9e8b3fDt
9c9453260d66b8957dc7fb411913d40ce90346035eda2b58c2f9c759b2125cf7Ds
0f791fdbdca1788b246815a870b316c43b536133a58c0b7483e09cce243dbf52Dr
beeb913c932963a0d8888e51c12b07a6993454a38f7ef567a5a56da4208e5949Dq
f035504bb52e167428211e66d8d1e6057ea84e13f5eb03edf9c7d58b26a52b99Dp
5df1a4e83ab5135939c23e1037e6d05b3b83a60b3b4a06fb6e85e91959657cbdDo
c942cd6a2b252aa88c37729e5753a20d63376cc0d329bdcbc5265806440a4f46Dn
b1a437d314e4c8a0e5d1e099a8fdbcdb1ff51d9795ce9c175c3bce0b7e4ca564Dm
4483963c33f057bfcd4b6120dbcefdc634413263eea9af2c988563522cfa5127Dl
0136b7f5a2716c2969f4dc132e19b7819af04e2aa0c5ba9bd9774ccf09c14e9fDk
9b4b4560b2485d70634ad393bde40d05f38c2ecce03135964bdc3876bf556570Dj
07b1856027333bf98a662c1c5c7b92d2391deb1108f57f3ca5b27d6ee192f7a0
2ow jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " YoE jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : Ao jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -om jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? q9 jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) qO jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is downo jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
[ [ 2 ow kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target| o kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))h qa jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
" " Y!oE kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : A"o kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -#om kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? &q9 kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) %qO kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down$o kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
|)o lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))|(q kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]h'qa kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
2*ow lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " Y+oE lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : A,o lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N --om lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? 0q9 lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) /qO lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down.o lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
[ [ 23ow mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target|2q lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]h1qa lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
" " Y4oE mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : A5o mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -6om mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? 9q9 mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) 8qO mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down7o mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
m m <qQ mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]|;q mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]h:qa mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
2=ow nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " Y>oE nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : A?o nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -@om nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? Cq9 nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) BqO nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is downAo nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
m m FqQ nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]|Eq nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]hDqa nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
" " YGoE oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : AHo oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -Iom oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? Lq9 oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) KqO oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is downJo oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
m m OqQ oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]|Nq oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]hMqa oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
=Pq oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c
@- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]
" " YQoE pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : ARo pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N -Som pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? Vq9 pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) UqO pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is downTo pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
m m YqQ pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]|Xq pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]hWqa pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
A[o qAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]=Zq pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c
@- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]
N N -\om qAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? _q9 qAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) ^qO qAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down]o qAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
m m bqQ qAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]|aq qAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]h`qa qAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
/ / Aeo rAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]Dd}
qEduardo Lima (Etrunko) <etrunko@redhat.com> 1.16.5-10.16eV@- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]=cq qAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c
@- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]
N N -fom rAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
? | ? iq9 rAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains) hqO rAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is downgo rAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]
m m lqQ rAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]|kq rAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]hjqa rAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update
.oa} sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-6^- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screenDn}
rEduardo Lima (Etrunko) <etrunko@redhat.com> 1.16.5-10.16eV@- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]=mq rAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c
@- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]
T tra sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-9^@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization)qas sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-8^V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
It is done in two steps (two different nsupdate messages).ypa sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-7^m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.
Ptg; sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]_sc] sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10^3- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False
u xwg sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))pvg{ sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)ug' sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target
yza tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-7^m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process..ya} tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-6^- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen.xgw sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
R t|a tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-9^@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization){as tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-8^V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
It is done in two steps (two different nsupdate messages).
P~g; tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]_}c] tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10^3- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False
u xg tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))p g{ tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)g' tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target
-is uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-8^V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
It is done in two steps (two different nsupdate messages).}i uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-7^m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process..gw tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
C C To; uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]ck] uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^3- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsexi uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization
w qx w |
o uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))t o{ uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
o' uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target
2 ow uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " Y oE uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
L xi vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization-is vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-8^V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
It is done in two steps (two different nsupdate messages).}
i vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-7^m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.
To; vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]ck] vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^3- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False
w qx w |o vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))to{ vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
o' vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target
2ow vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " YoE vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
e r+V: e D
1a363c8575a8323b1e1cbafa08ba87655572c3b032a755bcf5cf957927fb9a70D
ec1b22bbbd65cf0d8ac4abc748b4d4e1721149c816440d123ce3d707e25059a8D
8f22a24548ec519571fd7dcc4779339bb29955be70e289533d286d4069cdfe23D
3c4ec0f5afdd9b9d8e623857335cfd73d8e86540fe7c74886a0fc678fbf926acD
b410c0490c2af4f7e5e57b126535f682c43747b4f65ab0c3b8b86259df169293D~
2d79f11c74a72adcef4f3407e674947b25332958c8d3722a976ffc2d712fb812D}
ca2534fe257e28c069b648a161fddd50d841f1df267a98ca33d8ceea488d83c7D|
868a84b5cfeae8a5e75edd91fc853a5ed3490b4de3805f6ff0020f5483875122D{
ad1b306ed16dae044e07261f88e7b3e1846b160926009eba1eb3b872ad1d6443Dz
03701d6e0d843fdfb34d5135af97796623145817df79fabb6a8fb6eed7cfb552Dy
fb317c790c7775a8cd2becc6286e6028a33743078585cef6e150d0614e34aa17Dx
4aeb4ec586ae68b258e3a26e5bf455914a1bef9bf96ce52ea53b74decb9d1176Dw
31f46b22cd82ef4ccbb472cae30cc13508b35a42fe8d5807a5d9fc45b18a830a
N xi wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization-is wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-8^V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
It is done in two steps (two different nsupdate messages).
To; wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]ck] wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^3- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False
w qx w | o wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))t o{ wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
o' wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target
2 ow wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " Y oE wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: -!is xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-8^V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
It is done in two steps (two different nsupdate messages).A o wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
C C T$o; xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]c#k] xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^3- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex"i xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization
w qx w |'o xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))t&o{ xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
%o' xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target
2(ow xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " Y)oE xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: x+i yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 LocalizationA*o xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
T-o; yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]c,k] yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^3- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False
w qx w |0o yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))t/o{ yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
.o' yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target
21ow yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " Y2oE yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : A3o yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N x5i zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization-4om yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
T7o; zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]c6k] zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^3- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False
w qx w |:o zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))t9o{ zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete)
8o' zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target
2;ow zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
(Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target
" " Y<oE zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]
: : A=o zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_
- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]
N N N |@m
{Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927|?m
{Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>- Update man pages to reference kerberos(7)
- Resolves: #1704726->om zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] bR $RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ $Di $El $Fo $Gr $Ht $Iw $Jz $K| $L~ $M $N $O $P
$Q $R $S $T $U $V $W $Y $Z $[ $\ $] $^! $_$ $`' $a( $b) $c+ $d- $e0 $f1 $g2 $h3 $i5 $j7 $k: $l; $m< $n= $o@ $qG $rN $sU $t\ $uc $vj $wq $xx $y $z ${
$| $} $' $0 $9 $B $K $T $] $c $i $n $t ${ $ $ $ $ $ $! $# $( $+ $- $2 $5 $7 $< $? $A $E $L $R $X $_ $d $k $q $w $} $ $ $ $
v Gm {Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492Fm {Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492Em {Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289oDmu {Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126eCma {Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|Bm
{Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506Am {Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347
{{q oNmu |Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126eMma |Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|Lm
|Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506Km |Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347|Jm
|Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927|Im
|Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>- Update man pages to reference kerberos(7)
- Resolves: #1704726 Hm {Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492
e zto e |Um
}Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506Tm }Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347|Sm
}Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927 Rm |Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492Qm |Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492Pm |Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492Om |Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289
z $ z \m= }Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 [m }Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492Zm }Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492Ym }Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492Xm }Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289oWmu }Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126eVma }Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726
v
cm ~Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492bm ~Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289oamu ~Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126e`ma ~Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|_m
~Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506^m ~Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347|]m
~Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>- Log when non-root ksu authorization fails
- Resolves: #1270927
} }_v } jm Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289oimu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126ehma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726|gm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506fm= ~Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 em ~Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492dm ~Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492
? }uF ? |qm
Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>- Address some optimized-out memset() calls
- Resolves: #1663506pi Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163oi; Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319nm= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 mm Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492lm Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492km Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492
z $ z xm= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 wm Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492vm Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492um Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492tm Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289osmu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126erma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726
{ jz { m Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492~m Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492}m Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289o|mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126e{ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726zi Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163yi; Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319
Z {L6 Z omu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>- Add pkinit_cert_match support
- Resolves: #1656126ema Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>- Install kerberos(7)
- Resolves: #1704726
i- Julien Rische <jrische@redhat.com> - 1.15.1-55cjD- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961i Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163i; Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319m= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599 m Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492
9 ztV 9
i Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors
- Resolves: #2063163 i; Julien Rische <jrische@redhat.com> - 1.15.1-53bN@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319 m= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599
m Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492 m Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492m Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492m Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^- Do expiration warnings for all init_creds APIs
- Resolves: #1733289
A q "; A Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[[_ Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P@- fix multilib conflict in libksba-configH[9 Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P@- new upstream version Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH[9 Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[- new upstream versiondic Rex Dieter <rdieter@fedoraproject.org> 1.0.8-3M{@- libksba-devel multilib conflict (#601976)
i- Julien Rische <jrische@redhat.com> - 1.15.1-55cjD- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961
q `R q [ [_ Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P@- fix multilib conflict in libksba-configH [9 Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P@- new upstream version Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH[9 Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[- new upstream versiondic Rex Dieter <rdieter@fedoraproject.org> 1.0.8-3M{@- libksba-devel multilib conflict (#601976)V_Q Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO- Fix for CVE-2022-3515 (#2135695)L]? Daniel Mach <dmach@redhat.com> - 1.3.0-5RU- Mass rebuild 2014-01-24L]? Daniel Mach <dmach@redhat.com> - 1.3.0-4Rk- Mass rebuild 2013-12-27
e r+V: e D
4d0e360eff9294623b345353bcf2cb4623c50a3e2bf31ace6ba05141150d85fdD
359852ce38e0555b23e78c945070ef67c0599138eac0c52de77a819e8fdebce9D
cec370a7441899c3ffcd47f783a0437d9d649fd4a1252c6c317561f431e537c4D
36ad5a43df60889dd9c1134cb0e042317befa64f7293f44bc91271fddbbfc7e6D
d5b31f13f3b46bf5b0b92ae49a2422fef7d5c0ecefccc27c7b96a0aae7f7ce31D
0c8fa4695663226154eeb62875404c38ac8f61913460fe2e8036ae8e76cad75eD
082abb4e91620918c0d5d1da8dfb191f950c793d112a4ac3ec4f2055ca594c68D
d66f8f50f89a80ba6132ad39773812f3a9b5d598db35a63de6e8465c3c7137d8D
ee580eaecadcceeb9560a23a48c376d9c012f5fee8623d0f10419c273b744065D
46064f76c45b401ff1197bbdcd32585b704afcef86d2dad3fb76250749b3ef7dD
b93825bf103f570b5e1032748e404b0d685f2025279cdfd1efbd0506671dd269D
09f2614aeded0a8d1f7454f0270fe81a129ba048470ed9851001049d758c2a0fD
02d7a80b905c4425a04fb580f2e9cedea180c37a12f4aebcc804d768f6a12ffd
> ek > ['[_ Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P@- fix multilib conflict in libksba-configH&[9 Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P@- new upstream version% Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild$ Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH#[9 Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[- new upstream versionV"_Q Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO- Fix for CVE-2022-3515 (#2135695)L!]? Daniel Mach <dmach@redhat.com> - 1.3.0-5RU- Mass rebuild 2014-01-24L ]? Daniel Mach <dmach@redhat.com> - 1.3.0-4Rk- Mass rebuild 2013-12-27 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
B ek) B H0[9 Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P@- new upstream version/ Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild. Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH-[9 Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[- new upstream versionW,_S Jakub Jelen <jjelen@redhat.com> - 1.3.0-7c- Fix for CVE-2022-47629 (#2161571)V+_Q Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO- Fix for CVE-2022-3515 (#2135695)L*]? Daniel Mach <dmach@redhat.com> - 1.3.0-5RU- Mass rebuild 2014-01-24L)]? Daniel Mach <dmach@redhat.com> - 1.3.0-4Rk- Mass rebuild 2013-12-27( Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
b f I b 9 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH8[9 Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[- new upstream versiond7ic Rex Dieter <rdieter@fedoraproject.org> 1.0.8-3M{@- libksba-devel multilib conflict (#601976)W6_S Jakub Jelen <jjelen@redhat.com> - 1.3.0-7c- Fix for CVE-2022-47629 (#2161571)V5_Q Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO- Fix for CVE-2022-3515 (#2135695)L4]? Daniel Mach <dmach@redhat.com> - 1.3.0-5RU- Mass rebuild 2014-01-24L3]? Daniel Mach <dmach@redhat.com> - 1.3.0-4Rk- Mass rebuild 2013-12-272 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[1[_ Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P@- fix multilib conflict in libksba-config
q e % q HB[9 Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[- new upstream versiondAic Rex Dieter <rdieter@fedoraproject.org> 1.0.8-3M{@- libksba-devel multilib conflict (#601976)V@_Q Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO- Fix for CVE-2022-3515 (#2135695)L?]? Daniel Mach <dmach@redhat.com> - 1.3.0-5RU- Mass rebuild 2014-01-24L>]? Daniel Mach <dmach@redhat.com> - 1.3.0-4Rk- Mass rebuild 2013-12-27= Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[<[_ Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P@- fix multilib conflict in libksba-configH;[9 Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P@- new upstream version: Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
> e~ 4 > HK[9 Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[- new upstream versionVJ_Q Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO- Fix for CVE-2022-3515 (#2135695)LI]? Daniel Mach <dmach@redhat.com> - 1.3.0-5RU- Mass rebuild 2014-01-24LH]? Daniel Mach <dmach@redhat.com> - 1.3.0-4Rk- Mass rebuild 2013-12-27G Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[F[_ Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P@- fix multilib conflict in libksba-configHE[9 Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P@- new upstream versionD Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildC Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
/ e~ 4 / WT_S Jakub Jelen <jjelen@redhat.com> - 1.3.0-7c- Fix for CVE-2022-47629 (#2161571)VS_Q Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO- Fix for CVE-2022-3515 (#2135695)LR]? Daniel Mach <dmach@redhat.com> - 1.3.0-5RU- Mass rebuild 2014-01-24LQ]? Daniel Mach <dmach@redhat.com> - 1.3.0-4Rk- Mass rebuild 2013-12-27P Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[O[_ Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P@- fix multilib conflict in libksba-configHN[9 Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P@- new upstream versionM Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildL Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
> ~28 > V]_Q Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO- Fix for CVE-2022-3515 (#2135695)L\]? Daniel Mach <dmach@redhat.com> - 1.3.0-5RU- Mass rebuild 2014-01-24L[]? Daniel Mach <dmach@redhat.com> - 1.3.0-4Rk- Mass rebuild 2013-12-27Z Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[Y[_ Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P@- fix multilib conflict in libksba-configHX[9 Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P@- new upstream versionW Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildV Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildHU[9 Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[- new upstream version
t Cc t ci Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560Kbi/ Jan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441agA Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002[`gQ Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603^_gY Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129W^_S Jakub Jelen <jjelen@redhat.com> - 1.3.0-7c- Fix for CVE-2022-47629 (#2161571)
8 `" 8 ^igY Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U|@- Requires: cpp
Resolves: bz#1260129hi Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159gi5 Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401tfi Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048-eis Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762diO Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560
1 niO Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y@- Make sure that plasma screensaver is not used when previously configured
Resolves: bz#1342560mi Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y- Disable plasma screensaver for security reasons
Resolves: bz#1342560Kli/ Jan Grulich <jgrulich@redhat.com> - 4.11.19-10YA@- Fix grouping of tasks in taskmanager applet
Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
Resolves: bz#1333441kgA Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Yz- Fix loading of get hot new stuff for KWin decorations and effects
Resolves: bz#1422002[jgQ Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V3- Powerdevil: do not notify about a non existent action
Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
Resolves: bz#1262603
: NU: : rte Jakub Hrozek <jhrozek@redhat.com> - 1.1.26-1WYZ@- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26se' Jakub Hrozek <jhrozek@redhat.com> - 1.1.25-1Vb- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691ri Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_
@- KSysguard: Increase cpu buffer size in ksysguard
Resolves: bz#1856159qi5 Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]- Fix curly bracket in the patch for Plastik decoration theme
Resolves: bz#1779401tpi Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme
Resolves: bz#1677641
- Taskmanager: dismiss group when application is closed and there is enough space
Resolve: bz#1698048-ois Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b@- Sanitise notification HTML
Resolves: bz#1568853
- Increase cpu buffer size in ksysguard
Resolves: bz#1611762
G X7C G z{c Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1]B@- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Sambazzc Jakub Hrozek <jhrozek@redhat.com> - 1.4.2-1\? - Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Sambavyc Jakub Hrozek <jhrozek@redhat.com> - 1.3.4-1[3|@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasevxc Jakub Hrozek <jhrozek@redhat.com> - 1.3.3-1Z- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasevwc Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1Z̧@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase"vcc Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1YM- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
version 4.7.x#uec Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1X@- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
version 4.6.x
Y M Y vc Jakub Hrozek <jhrozek@redhat.com> - 1.3.3-1Z- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasevc Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1Z̧@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase" cc Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1YM- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
version 4.7.x#ec Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1X@- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
version 4.6.xr~e Jakub Hrozek <jhrozek@redhat.com> - 1.1.26-1WYZ@- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26}e' Jakub Hrozek <jhrozek@redhat.com> - 1.1.25-1Vb- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691`|e_ Andreas Schneider <asn@redhat.com> - 1.5.4-2`Y@- resolves: #1941511 - Fix CVE-2021-20277
~ && ~ # ec Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1X@- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
version 4.6.xre Jakub Hrozek <jhrozek@redhat.com> - 1.1.26-1WYZ@- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26e' Jakub Hrozek <jhrozek@redhat.com> - 1.1.25-1Vb- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691`e_ Andreas Schneider <asn@redhat.com> - 1.5.4-2`Y@- resolves: #1941511 - Fix CVE-2021-20277zc Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1]B@- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Sambazc Jakub Hrozek <jhrozek@redhat.com> - 1.4.2-1\? - Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Sambavc Jakub Hrozek <jhrozek@redhat.com> - 1.3.4-1[3|@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase
Yem `e_ Andreas Schneider <asn@redhat.com> - 1.5.4-2`Y@- resolves: #1941511 - Fix CVE-2021-20277zc Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1]B@- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Sambazc Jakub Hrozek <jhrozek@redhat.com> - 1.4.2-1\? - Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Sambav
c Jakub Hrozek <jhrozek@redhat.com> - 1.3.4-1[3|@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasev c Jakub Hrozek <jhrozek@redhat.com> - 1.3.3-1Z- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasev c Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1Z̧@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase"
cc Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1YM- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
version 4.7.x
C v X7 C vc Jakub Hrozek <jhrozek@redhat.com> - 1.3.4-1[3|@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasevc Jakub Hrozek <jhrozek@redhat.com> - 1.3.3-1Z- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasevc Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1Z̧@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase"cc Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1YM- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
version 4.7.x#ec Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1X@- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
version 4.6.xre Jakub Hrozek <jhrozek@redhat.com> - 1.1.26-1WYZ@- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26e' Jakub Hrozek <jhrozek@redhat.com> - 1.1.25-1Vb- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691
_ = _ ( W{ Karel Zak <kzak@redhat.com> 2.23.2-60\R@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login= W% Karel Zak <kzak@redhat.com> 2.23.2-59[z@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failedk W Karel Zak <kzak@redhat.com> 2.23.2-58[<- fix #1594681 - [RHEL7.2] blkid does not output swap area_Wk Karel Zak <kzak@redhat.com> 2.23.2-57["X- add another ppc aliases to setarch (#1562125)`e_ Andreas Schneider <asn@redhat.com> - 1.5.4-2`Y@- resolves: #1941511 - Fix CVE-2021-20277zc Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1]B@- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Sambazc Jakub Hrozek <jhrozek@redhat.com> - 1.4.2-1\? - Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Samba
e r+V: e D
1a91953e84dbe2c03ef4d9284debe9f3fd29f808a721e032346b19d8191151ccD
199c200e85ae57dc217530a09f2172f136c763583a9869d518e3dd7c2a2f3c24D
b64c66f5d35425a886b1afbcf898922915a06a253e4ec2f2efb169f42dea7125D
09936061a18c7bf3b0903e9e1994dca141d245478064ada19312d0d78abe44aeD
ca36fb0f490cdd14f4ed8b6ecf0440998542eaeed3c3985f7357025964231df6D
7631dec5bfc4f885319322ddf28a8c174bd735138c0021a996ea89b80e010ec4D
c0a963a27f23cc436b7364ce694e6afe9a0e8d26be17bc8dc816b46fc2e0f261D
0cff7abce034e9ae5e89bd1f5c50241356dd38507e0c53e17d563453b7923822D
c10cbe426290ea35692c88e6f4393bef89f510b20d8587b123e03a419891e2a3D
13f0a70db8c30427ac5dcfc998ed9c2ea98da56b6c4439d62d54bc51fca0c198D
776a13c05abec92b93e26a3e73b33106410100566b5e395d5a22469f660365abD
74ba5dbc31e8d072aad83ccc34e693990c0625ce81a367690bc1cc6bbdbdc121D
2d1f2caacc8bdd289ec4d9a21bbe90c08d63cc088bec34c32f2acb2df58d2761
E E !WI Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.A W- Karel Zak <kzak@redhat.com> 2.23.2-62]Ik- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information\ Wc Karel Zak <kzak@redhat.com> 2.23.2-61\@- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev
; !; a#Wm Karel Zak <kzak@redhat.com> 2.23.2-65^@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directoryZ"W_ Karel Zak <kzak@redhat.com> 2.23.2-64^k@- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit
v T# v ((W{ Karel Zak <kzak@redhat.com> 2.23.2-60\R@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login='W% Karel Zak <kzak@redhat.com> 2.23.2-59[z@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failedk&W Karel Zak <kzak@redhat.com> 2.23.2-58[<- fix #1594681 - [RHEL7.2] blkid does not output swap area_%Wk Karel Zak <kzak@redhat.com> 2.23.2-57["X- add another ppc aliases to setarch (#1562125)D$g# Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]
E E +WI Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.A*W- Karel Zak <kzak@redhat.com> 2.23.2-62]Ik- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information\)Wc Karel Zak <kzak@redhat.com> 2.23.2-61\@- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev
; !; a-Wm Karel Zak <kzak@redhat.com> 2.23.2-65^@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directoryZ,W_ Karel Zak <kzak@redhat.com> 2.23.2-64^k@- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit
v T# v (2W{ Karel Zak <kzak@redhat.com> 2.23.2-60\R@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login=1W% Karel Zak <kzak@redhat.com> 2.23.2-59[z@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failedk0W Karel Zak <kzak@redhat.com> 2.23.2-58[<- fix #1594681 - [RHEL7.2] blkid does not output swap area_/Wk Karel Zak <kzak@redhat.com> 2.23.2-57["X- add another ppc aliases to setarch (#1562125)D.g# Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]
E E 5WI Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.A4W- Karel Zak <kzak@redhat.com> 2.23.2-62]Ik- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information\3Wc Karel Zak <kzak@redhat.com> 2.23.2-61\@- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev
; !; a7Wm Karel Zak <kzak@redhat.com> 2.23.2-65^@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directoryZ6W_ Karel Zak <kzak@redhat.com> 2.23.2-64^k@- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit
v T# v (<W{ Karel Zak <kzak@redhat.com> 2.23.2-60\R@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login=;W% Karel Zak <kzak@redhat.com> 2.23.2-59[z@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failedk:W Karel Zak <kzak@redhat.com> 2.23.2-58[<- fix #1594681 - [RHEL7.2] blkid does not output swap area_9Wk Karel Zak <kzak@redhat.com> 2.23.2-57["X- add another ppc aliases to setarch (#1562125)D8g# Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]
E E ?WI Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.A>W- Karel Zak <kzak@redhat.com> 2.23.2-62]Ik- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information\=Wc Karel Zak <kzak@redhat.com> 2.23.2-61\@- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev
; !; aAWm Karel Zak <kzak@redhat.com> 2.23.2-65^@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directoryZ@W_ Karel Zak <kzak@redhat.com> 2.23.2-64^k@- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit
^ ^ /Eqo Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6U- libpcap now correctly recognizes Netlink datalink type (#1031974)
- fix vlan tagged packet filtering (#1079525)uDq{ Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5U@- display also first packet when capturing in cooked mode (#1176612)
- make sure that userland bpf filter interpreter is given snaplen such that size of
cooked header is account for&Cq] Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4T}- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)DBg# Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]
_(% LqQ Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-13b \@- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdrKq Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-12]8H@- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet dropsvJE) Michal Ruprich - 14:1.5.3-11Y- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad framesYIuA Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-10Y@- Add support for AF_VSOCKXHsA Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-9Y,
@- Bound packet size to 64kzGq Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-8U@- make sure that sll header size is accounted for (#1176612) FqI Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-7U- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974)
, U[ , XRsA Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-9Y,
@- Bound packet size to 64kzQq Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-8U@- make sure that sll header size is accounted for (#1176612) PqI Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-7U- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974)/Oqo Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6U- libpcap now correctly recognizes Netlink datalink type (#1031974)
- fix vlan tagged packet filtering (#1079525)uNq{ Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5U@- display also first packet when capturing in cooked mode (#1176612)
- make sure that userland bpf filter interpreter is given snaplen such that size of
cooked header is account for&Mq] Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4T}- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)
V )P V uXq{ Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5U@- display also first packet when capturing in cooked mode (#1176612)
- make sure that userland bpf filter interpreter is given snaplen such that size of
cooked header is account for&Wq] Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4T}- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096) VqQ Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-13b \@- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdrUq Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-12]8H@- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet dropsvTE) Michal Ruprich - 14:1.5.3-11Y- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad framesYSuA Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-10Y@- Add support for AF_VSOCK
q L-t q _q Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-12]8H@- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet dropsv^E) Michal Ruprich - 14:1.5.3-11Y- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad framesY]uA Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-10Y@- Add support for AF_VSOCKX\sA Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-9Y,
@- Bound packet size to 64kz[q Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-8U@- make sure that sll header size is accounted for (#1176612) ZqI Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-7U- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974)/Yqo Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6U- libpcap now correctly recognizes Netlink datalink type (#1031974)
- fix vlan tagged packet filtering (#1079525)
a [ a dqI Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-7U- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974)/cqo Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6U- libpcap now correctly recognizes Netlink datalink type (#1031974)
- fix vlan tagged packet filtering (#1079525)ubq{ Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5U@- display also first packet when capturing in cooked mode (#1176612)
- make sure that userland bpf filter interpreter is given snaplen such that size of
cooked header is account for&aq] Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4T}- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096) `qQ Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-13b \@- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdr
d &O! d 8kY Jarod Wilson <jarod@redhat.com> 22.1-1\e- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274 jqQ Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-13b \@- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdriq Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-12]8H@- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet dropsvhE) Michal Ruprich - 14:1.5.3-11Y- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad framesYguA Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-10Y@- Add support for AF_VSOCKXfsA Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-9Y,
@- Bound packet size to 64kzeq Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-8U@- make sure that sll header size is accounted for (#1176612)
po bq[m Honggang Li <honli@redhat.com> - 22.4-3^@- Restore three patches
- Resolves: rhbz#1817412
p[; Honggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585VoYU Jarod Wilson <jarod@redhat.com> 22.4-1]|@- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296 nY) Jarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541xmY Jarod Wilson <jarod@redhat.com> 22.1-3\- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426 lY? Jarod Wilson <jarod@redhat.com> 22.1-2\- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426
| qE | xwY Jarod Wilson <jarod@redhat.com> 22.1-3\- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426 vY? Jarod Wilson <jarod@redhat.com> 22.1-2\- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#16874268uY Jarod Wilson <jarod@redhat.com> 22.1-1\e- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274t[O Honggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699s[C Honggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221
r[; Honggang Li <honli@redhat.com> - 22.4-4^- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482
{ }[C Honggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221
|[; Honggang Li <honli@redhat.com> - 22.4-4^- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482b{[m Honggang Li <honli@redhat.com> - 22.4-3^@- Restore three patches
- Resolves: rhbz#1817412
z[; Honggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585VyYU Jarod Wilson <jarod@redhat.com> 22.4-1]|@- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296 xY) Jarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541
> g > VYU Jarod Wilson <jarod@redhat.com> 22.4-1]|@- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296 Y) Jarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541xY Jarod Wilson <jarod@redhat.com> 22.1-3\- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426 Y? Jarod Wilson <jarod@redhat.com> 22.1-2\- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#16874268Y Jarod Wilson <jarod@redhat.com> 22.1-1\e- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274~[O Honggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699
q |P u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode[O Honggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699[C Honggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221
[; Honggang Li <honli@redhat.com> - 22.4-4^- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482b[m Honggang Li <honli@redhat.com> - 22.4-3^@- Restore three patches
- Resolves: rhbz#1817412
[; Honggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf
u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU
w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
e r+V: e D*
bc430ed0cfd4a663b76358074912057f989f4af493a6909136e70731ba2358deD)
730a731598f675b1827b85e2f2a963fb1c75d82ea0eb61e2b544a1c868517c7aD(
694e41c94c00e68912502d5f6c5bfde8a366987f5381e5d31b889a6b3928fdf0D'
09f598da7d3fbe1d2b05e159dc8f3d04792678621bf6d1f87c0edb4896d550a3D&
5a66d5d5dc478ed425ac3150ca54707625780a2e26284391fb1ebfb7924f88e9D%
ff496670decb17b290f032a8854f0420ac2848d6b92e9e0df99491a13901a396D$
31f3f35c713ad4fecb47ca4bfcba6b22a99a0311e91687edac989c0a717ba2ecD#
17cb2cf3a7524082c239fd29082b6e294757fdb6175dc11ee0f7a52fb4e3fd76D"
443c9cfc06a5f4f00f7780823a1f4d236782b838c05109edde4737cba50357cbD!
2c8b6a3c06bbaf16efe5dda84ccb23687cd29b2f04bf1f640024f805be0dc23bD
0f7c4de217d674dd4adcc5ec84c9df840a974061fb940697d0f1d2c3317bca7dD
564ac561fd3290312c3e833edb5ea883a24d202539893cdb0482247a743750b5D
8129ad43222a6a88ffa26b7ed5f36d10b1edede7d67aa145c0880eb6d3058828
* &%C * $u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
#u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t"uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf!u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t+uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf*u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858)u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt(uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU'w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~&w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm%ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C 1u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode0gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~/w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm.ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black-u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
,u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * 8u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
7u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t6uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf5u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168584u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt3uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU2w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t?uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf>u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858=u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt<uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU;w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~:w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm9ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Eu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeDgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Cw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormBui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackAu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
@u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Lu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Ku' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tJuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfIu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Hu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStGuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUFw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tSuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfRu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Qu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStPuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUOw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Nw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormMui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Yu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeXgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Ww Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormVui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackUu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Tu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * `u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
_u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t^uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf]u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858\u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt[uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUZw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tguw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresffu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858eu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStduw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUcw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~bw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormaui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C mu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modelgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~kw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormjui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackiu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
hu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * tu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
su' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849truw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfqu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858pu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStouw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUnw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t{uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfzu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858yu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStxuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUww5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~vw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormuui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm~ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black}u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
|u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858
u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~
w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t#uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf"u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858!u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~ w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
e r+V: e D7
c1965ea7b6eac21676014e538803935d779938ef7971d74668df9e5d24b9f56dD6
9b8eaf39c60cfcb55b3c1b2bca5d0dd535225e1dcedf7eeb80d3c1241b9c0478D5
61f9945c76bfd6399739a4cfc42c3e9b350ca70cec8aab0875d6618d3f45ceceD4
f6a468589dc2d68540fefdc5fe28df4e741f1d5c46a396376cd5787d8170a88aD3
79d0f0c2a70577d228a2c71fdc289b4a2944b4681bf3f5d79f9b04862f3af683D2
3fd5a3ec93bfb1ba9a34a9f68433573b2a39224e618b9e9c02aed4cb89de5c48D1
82a64c4e305a429be421cace128685a29a5971da0cb54ac1d883f150b1f92460D0
617e115047b71db008189f9a914bce3674313e8fcd3e3ce40564fe69f65c44e1D/
9fe65bb70a192bc16ad246fb03daefa211650e429f9834845e0a048fb42253d3D.
681f9ded8847701dec6bf5ba7ebdeed4dc1b38b39177a2f1e148695f5ee1b1aaD-
6f4280fe77b168975f638489aefbd874e08a1bcc00b9b43792472c51d7f9fb1cD,
d0502f4f4281f85dbdfa765998b7f3281933945c8291d40a49d1ba948c4c59c6D+
664ee953022453c5e78fe8b0d4d06dc2c1ec406c0d52a232f631aca0f1032abc
C nv C )u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode(gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~'w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm&ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black%u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
$u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * 0u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
/u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t.uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf-u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858,u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt+uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU*w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t7uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf6u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168585u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt4uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU3w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~2w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm1ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C =u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode<gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~;w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm:ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black9u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
8u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Du Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Cu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tBuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfAu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858@u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt?uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU>w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tKuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfJu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Iu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStHuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUGw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Fw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormEui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Qu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modePgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Ow Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormNui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackMu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Lu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Xu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Wu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tVuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfUu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Tu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStSuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorURw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t_uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf^u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858]u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt\uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU[w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Zw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormYui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C eu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modedgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~cw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormbui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackau Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
`u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * lu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
ku' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tjuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfiu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858hu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStguw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUfw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tsuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfru[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858qu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStpuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUow5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~nw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormmui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C yu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modexgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ww Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormvui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackuu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
tu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t~uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf}u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858|u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt{uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUzw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C
u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm
ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C !u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
e r+V: e DD
20865c1814ad86f27c05f9c958a9ea1303c9b5b7762952f4c5f8da12d65f4cceDC
207aade4092c5ae2176b6a08df041bef38194b9beb887c0eecd8a4934aecb6c7DB
06027d118bc6eda893d13e73a13e75851e1f01cc10ad76d87de54aa42810f00eDA
aa3dd48f76695ea199491a446126a20084e82d91243a36c7d1bc1bb4c386dde8D@
3f8e4829e35974784aa21e86171e8782ae787788130e87d8098084937f4a1a3bD?
e438b29905ef5550f7c5d07e807e9f7f882272fce7c62fc02d8dd31abdf3e759D>
b508e84aaf73a34f2d109602c78e906df8eb37fed7c853749929b1c52770464fD=
21074e40c8578a4e4a866f138184265b3827027519d1d1574e83df6ea2d30c71D<
8a462bdff8ebc77ce5f8cf6eb1d98625e34218cd0b64485d9b9e6e7837d422f7D;
6a2860de3c6856a89ddef7db26248c1132d0358c047f0d29f64cddea617e46a6D:
c5f6d5239e70240eea7d64dfafd3bbd553f7681f7d2bec1a8ab1298d606ef9d2D9
b18f3f7901340c38120aa1a6fa30010d2c8689dacd4c2609ff225ceed2672899D8
a2fb51336df10bfeae88e811816e04967399b366dd70cde5a7202cbabb4d0a7f
* &%C * (u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
'u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t&uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf%u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858$u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt#uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU"w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t/uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf.u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858-u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt,uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU+w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~*w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm)ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C 5u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode4gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~3w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm2ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black1u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
0u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * <u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
;u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t:uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf9u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168588u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt7uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU6w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog bR %RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ $$ $+ $1 $8 $? $E $L $S $Y $` $g $m $t ${ $ $ $ $ $ $# $) $0 $Á7 $ā= $ŁD $ƁK $ǁQ $ȁX $Ɂ_ $ʁe $ˁl $́s $́y $ $ρ $Ё
$с $ҁ $Ӂ! $Ձ( $ց/ $ׁ5 $< $ځC $ہI $܁P $݁W $ށ] $߁d $k $q $x $ $ $ $ $ $ $' $- $4 $; $A $H $O $U $\ $c $i $p $w $} $ $ $ $ $ $% $, % 3 %9 %@ %G %M %T %[ %a %h % o %
u % | % %
% % % %$ %+
P
32 P tCuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfBu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Au Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt@uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU?w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~>w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm=ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Iu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeHgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Gw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormFui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackEu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Du' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Pu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Ou' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tNuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfMu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Lu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStKuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUJw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tWuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfVu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Uu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStTuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUSw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Rw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormQui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C ]u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode\gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~[w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormZui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackYu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Xu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * du Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
cu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tbuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfau[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858`u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt_uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU^w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tkuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfju[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858iu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSthuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUgw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~fw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormeui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C qu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modepgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ow Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormnui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackmu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
lu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * xu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
wu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tvuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfuu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858tu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStsuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUrw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf~u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858}u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt|uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU{w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~zw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormyui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t
uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm
ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t'uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf&u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858%u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt$uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU#w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~"w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm!ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
e r+V: e DQ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 nv C -u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode,gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~+w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm*ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black)u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
(u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * 4u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
3u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t2uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf1u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168580u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt/uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU.w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t;uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf:u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168589u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt8uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU7w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~6w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm5ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Au- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode@gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~?w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm>ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black=u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
<u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Hu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Gu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tFuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfEu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Du Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStCuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUBw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tOuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfNu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Mu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStLuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUKw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Jw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormIui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Uu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeTgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Sw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormRui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackQu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Pu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * \u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
[u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tZuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfYu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Xu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStWuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUVw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tcuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfbu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858au Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt`uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU_w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~^w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm]ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C iu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modehgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~gw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormfui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackeu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
du' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * pu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
ou' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tnuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfmu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858lu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStkuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUjw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P twuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfvu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858uu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSttuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUsw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~rw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormqui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C }u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode|gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~{w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormzui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackyu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
xu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU~w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf
u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C %u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode$gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~#w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm"ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black!u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
e r+V: e D^
d95478aaa9369b4b49b219aa8aa09278b47ea7f04a2b46280915968e638d861bD]
6f13f12c50ed9a62d92967f246f2c8b9f5260a7546412f06126b024aedc1789fD\
3cfeeda763854fb5e06228183bd5e587f1bed1e4d625590a6b4ac06187c951b4D[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* &%C * ,u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
+u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t*uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf)u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858(u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt'uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU&w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t3uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf2u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168581u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt0uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU/w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~.w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm-ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C 9u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode8gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~7w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm6ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black5u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
4u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * @u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
?u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t>uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf=u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858<u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt;uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU:w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tGuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfFu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Eu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStDuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUCw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Bw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormAui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Mu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeLgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Kw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormJui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackIu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Hu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Tu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Su' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tRuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfQu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Pu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStOuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUNw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t[uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfZu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Yu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStXuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUWw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Vw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormUui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C au- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode`gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~_w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm^ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black]u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
\u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * hu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
gu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tfuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfeu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858du Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStcuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUbw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P touw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfnu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858mu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStluw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUkw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~jw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormiui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C uu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modetgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~sw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormrui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackqu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
pu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * |u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
{u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tzuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfyu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858xu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStwuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUvw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm}ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf
u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU
w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * $u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
#u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t"uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf!u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t+uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf*u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858)u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt(uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU'w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~&w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm%ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
e r+V: e Dk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`
4d32b8be0b3416b8c7b225709e77847f3eb420ac65b6a5a1c9c5f7bf13033407D_
e40e9974b84165100cfd49afdff81253e38049ca2ba3d57dcdf352538fe84014
C nv C 1u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode0gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~/w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm.ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black-u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
,u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * 8u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
7u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t6uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf5u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168584u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt3uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU2w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t?uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf>u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858=u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt<uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU;w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~:w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm9ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Eu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeDgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Cw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormBui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackAu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
@u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Lu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Ku' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tJuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfIu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Hu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStGuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUFw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tSuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfRu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Qu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStPuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUOw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Nw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormMui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Yu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeXgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Ww Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormVui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackUu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Tu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * `u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
_u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t^uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf]u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858\u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt[uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUZw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tguw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresffu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858eu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStduw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUcw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~bw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormaui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C mu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modelgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~kw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormjui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackiu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
hu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * tu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
su' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849truw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfqu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858pu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStouw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUnw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t{uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfzu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858yu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStxuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUww5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~vw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormuui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm~ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black}u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
|u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858
u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~
w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t#uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf"u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858!u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~ w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C )u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode(gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~'w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm&ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black%u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
$u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
e r+V: e Dx
1a4b2811d9710ab0cbee6c14d0d65efdfcbc1fb050caa3686160958d16c06337Dw
41d3b70e19103a25ac6a0a877859dcc9105adf2602d4dea078e3220d5fdcb007Dv
b4a38f14218c431d03e34c26a134c609d688ef2c83f268f6867bfb1003efcf2bDu
a005198937d77a556b2d5c86b03b36028c5cdf485f869c8f661e5bdaeca48381Dt
3b84e45c8f431e6aced2faecb97912cb424f0373293013c739154621f571ced8Ds
2db01b2d2f442ec2b3ab438e94ca56bfd13bc67b07ac74f28b1b9d2435418aa5Dr
a2f70fbdd27181bcd656bbd6bb28222e80496a2d4cef2918f74b66e887b0ad68Dq
9194142e9ca71c44cbdedac14b2fbe14b54b0a0893096cf32b9783f204b7da87Dp
851583dc78e98a516586667fe472405624392dbb850b366aac5e87fde83e922eDo
c6ee2dc7f4859cf7e741172a64ed8a91fa20379d8b50ae273712fdc3b54f8d59Dn
6de667e5382d2e35f18b69390c3e03a9e718d8bc403a5db6c6f6072e6bf683c2Dm
a5dc184a11c5ee57f55ab4b8abbcf391aa3b6bac3960c6f35615716c35d18da3Dl
4fb46ce209b71d1437ce790ff6339784632c86ff1c34dc42c88780ecc894575d
* &%C * 0u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
/u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t.uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf-u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858,u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt+uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU*w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t7uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf6u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168585u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt4uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU3w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~2w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm1ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C =u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode<gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~;w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm:ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black9u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
8u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Du Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Cu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tBuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfAu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858@u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt?uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU>w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tKuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfJu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Iu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStHuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUGw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Fw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormEui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Qu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modePgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Ow Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormNui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackMu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Lu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Xu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Wu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tVuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfUu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Tu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStSuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorURw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t_uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf^u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858]u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt\uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU[w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Zw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormYui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C eu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modedgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~cw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormbui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackau Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
`u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * lu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
ku' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tjuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfiu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858hu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStguw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUfw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tsuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfru[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858qu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStpuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUow5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~nw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormmui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C yu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modexgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ww Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormvui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackuu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
tu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t~uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf}u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858|u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt{uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUzw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C
u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm
ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C !u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * (u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
'u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t&uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf%u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858$u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt#uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU"w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t/uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf.u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858-u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt,uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU+w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~*w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm)ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
e r+V: e D
5c171ad6a96c5f3feec12d0ec56fecf45cb0e8859deeb78966c227cc21a25217D
91b3059cb08a4f72259c6d15febbed4bf315c966b9b48ef63e56b900babbfcbcD
bad44aa372dd71ae7305ec77706bf7df2edd9e52a618230db1ac76a6fb0f5545D
4b8be9f1166188e6844902fa02e3822fd56edbfd5e5043d22efd3d39bd199f57D
6eb6b0f0d64dd44ca445beb920426e0a8262e18d4611f37af0bcf266a49e7ba1D
04eb35414e82fe2433c837b70edc142805f7455f68f171ad1ea43e534a94de83D
50dd826f883ca6e83a5520159702919e8640813f0006c32d9ce6531b4f92818bD~
b66da86b2643b46bd5d193eebb6f236cfdf753506a9c50caf4ed52fc5bce7172D}
d828d76b49cd8eef2060250c9dc6bd5cb60ff05970adf2e0352cdffb341700ebD|
51c0c235f8ee720c1949dd34f66d66bf7f5b50fe1c37d366fe724ce644b3bee5D{
e329f4af5a2d9e0b4ba62a957f0696c7fa7fd5a4fb911f99a4f9f7fc965b46b8Dz
c636f7b1ee487e382b84fc78e7079b3cdcbe8a18b64dbec20379bad79eb119ddDy
423fbdf1d86a2b10618e98f380c62c9e34640a2c7aae29c80960b34008181a8a
C nv C 5u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode4gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~3w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm2ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black1u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
0u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * <u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
;u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t:uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf9u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168588u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt7uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU6w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tCuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfBu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Au Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt@uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU?w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~>w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm=ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Iu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeHgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Gw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormFui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackEu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Du' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Pu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Ou' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tNuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfMu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Lu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStKuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUJw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog bR %}RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ %8 %? %E %L %S %Y %` % g % m % t % { % %! %" %# %$ %%# %&) %(0 %)7 %*= %+D %,K %-Q %.X %/_ %0e %1l %2s %3y %4 %5 %6
%7 %8 %9! %:( %;/ %=5 %>< %?C %@I %AP %CW %D] %Ed %Fk %Gq %Hx %I %J %K %L %M %N %O' %P- %R4 %S; %TA %UH %VO %WU %X\ %Yc %Zi %[p %\w %]} %^ %_ %` %a %b %c% %d, %e3 %g9 %h@ %iG %jM %kT %l[ %ma %nh %oo %pu %q| %r %s %t %u %v %w$ %x+ %y1 %{8 %|?
P
32 P tWuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfVu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Uu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStTuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUSw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Rw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormQui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C ]u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode\gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~[w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormZui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackYu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Xu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * du Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
cu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tbuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfau[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858`u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt_uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU^w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tkuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfju[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858iu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSthuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUgw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~fw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormeui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C qu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modepgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ow Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormnui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackmu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
lu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * xu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
wu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tvuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfuu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858tu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStsuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUrw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf~u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858}u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt|uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU{w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~zw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormyui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t
uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm
ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t'uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf&u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858%u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt$uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU#w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~"w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm!ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C -u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode,gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~+w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm*ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black)u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
(u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
e r+V: e D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* &%C * 4u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
3u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t2uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf1u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168580u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt/uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU.w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t;uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf:u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168589u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt8uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU7w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~6w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm5ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Au- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode@gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~?w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm>ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black=u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
<u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Hu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Gu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tFuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfEu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Du Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStCuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUBw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tOuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfNu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Mu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStLuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUKw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Jw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormIui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Uu-
Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeTgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Sw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormRui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackQu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Pu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * \u
Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
[u'
Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tZuw
Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfYu[
Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Xu
Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStWuw
Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUVw5
Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tcuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfbu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858au Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt`uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU_w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~^w
Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm]ui
Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C iu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modehgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~gw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormfui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackeu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
du' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * pu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
ou' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tnuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfmu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858lu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStkuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUjw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P twuw
Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfvu[
Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858uu
Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSttuw
Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUsw5
Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~rw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormqui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C }u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode|gI
Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~{w
Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormzui
Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackyu
Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
xu'
Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU~w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf
u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C %u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode$gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~#w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm"ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black!u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * ,u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
+u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t*uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf)u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858(u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt'uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU&w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t3uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf2u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168581u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt0uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU/w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~.w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm-ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
e r+V: e D
c81589b411d434da5e3ce899b20f0ec5f0d89e805bb98654a0220574a6567a5eD
1fa785144303de32e2279da8e40942e02967bad3724f4de700446c1ac09a1b64D
bf7de5cc417bd99213c10e8ad8c5772cf6317388fcd795f4c584548f0e6b9c7bD
9a48d9a5c8ba240b00760f5cdc0080f6ea8fb38b0f044469b34b8ced3f0be6e9D
5e35c68daaac093d3beb1bdd57551b4b11d68962192494ead3ec78504bd924e9D
2e69eeedc5aed03c46ec6f8fd3d7d75c65c5f88aef5cacb89a4b23aa19c92d1dD
c79764e439db44bf5b1a2d07e42ed27562693784744a529c9d1f300ee54145d2D
26284ef9814e9eefa37f15d0dfb0ddab775cc08083594ba1bd43d0b652f61680D
8dc48d5e4e60131ad36fe3003497d6d355365e66c85a79b791c2245839838f72D
0fd4e46db83e6ecf64c063a8c953be3ba857eec99d069a0824fbc7cb3181c25fD
eb9adb9f6d4141d4d82fd9f2740d41d0ed32fde5148d9e4a3d952f1aedb10a52D
61e6d58d8d1b2b2be1f5bb1731c99cf450b81b29303d4f3e1c8772d9b04d2bbdD
79ac9fe0cf39a64255d82fbb10c0d150d68cd88753359d4d13150cbb094c9674
C nv C 9u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode8gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~7w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm6ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black5u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
4u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * @u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
?u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t>uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf=u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858<u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt;uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU:w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tGuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfFu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Eu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStDuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUCw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Bw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormAui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Mu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeLgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Kw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormJui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackIu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Hu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Tu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Su' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tRuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfQu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Pu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStOuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUNw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t[uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfZu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Yu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStXuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUWw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Vw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormUui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C au- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode`gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~_w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm^ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black]u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
\u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * hu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
gu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tfuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfeu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858du Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStcuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUbw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P touw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfnu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858mu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStluw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUkw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~jw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormiui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C uu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modetgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~sw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormrui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackqu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
pu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * |u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
{u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tzuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfyu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858xu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStwuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUvw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm}ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf
u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU
w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * $u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
#u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t"uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf!u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t+uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf*u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858)u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt(uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU'w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~&w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm%ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C 1u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode0gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~/w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm.ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black-u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
,u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
e r+V: e D,
4016c342a85401eac37beabfbb025c514e077802555e329f3f4a77d1a835864fD+
656975f5968fdbaba0a643e24529b3b0762ebabec0f92509a22f96017cfcb03eD*
a6fbfa63c8d1fd4dd8cfecfeb29858434215394a4e58af6c4ba12e2f82e2a61dD)
39769e7385d3d8eb28ca268acbedfd9c29363613ab7fa8b641d5ad4a91230f51D(
3268b7dcf19f5e3720d65d039632fa15991336537a37e486e37ed194609102b2D'
83b0eba9581758f02b5754034154c3a6a53b89674d90775b537b093b6d1abebfD&
2f096012ac594da690f66f1e3c46720188e409c2af7f791c49395822c50dfb6cD%
75989f565f1e52c44012dd4948e788f9b6b90cf9a5a649233e43f199a47b4e44D$
f138db80a257cdee37382222b7317f2f922c13efffd8d47716c4daff0fb11d68D#
af95baddeac54f485e8299cc7cd2301b5e659e0a3c22ea98291b012c8a427d49D"
92b645cab65928cc0f32fe9883d7068564a4040ac0faf35c3ee1790142b461a1D!
40a0c734dea8e1bcdc12a1fa49951322a06ea7216cf06631e2528d597a596fd7D
f69f263757a6c7fcfc52b278211fe2c2f78f053dfb157200b4e1e1a874b400c2
* &%C * 8u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
7u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t6uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf5u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168584u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt3uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU2w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t?uw !Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf>u[ !Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858=u !Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt<uw !Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU;w5 !Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~:w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm9ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Eu- "Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeDgI !Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Cw !Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormBui !Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackAu !Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
@u' !Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Lu "Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Ku' "Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tJuw "Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfIu[ "Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Hu "Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStGuw "Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUFw5 "Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tSuw #Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfRu[ #Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Qu #Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStPuw #Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUOw5 #Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Nw "Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormMui "Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Yu- $Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeXgI #Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Ww #Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormVui #Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackUu #Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Tu' #Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * `u $Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
_u' $Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t^uw $Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf]u[ $Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858\u $Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt[uw $Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUZw5 $Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tguw %Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresffu[ %Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858eu %Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStduw %Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUcw5 %Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~bw $Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormaui $Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C mu- &Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modelgI %Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~kw %Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormjui %Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackiu %Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
hu' %Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * tu &Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
su' &Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849truw &Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfqu[ &Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858pu &Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStouw &Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUnw5 &Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t{uw 'Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfzu[ 'Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858yu 'Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStxuw 'Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUww5 'Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~vw &Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormuui &Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- (Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI 'Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w 'Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm~ui 'Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black}u 'Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
|u' 'Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u (Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' (Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw (Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ (Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u (Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw (Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 (Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw )Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ )Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858
u )Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw )Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU w5 )Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~
w (Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui (Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- *Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI )Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w )Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui )Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku )Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' )Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u *Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' *Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw *Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ *Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u *Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw *Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 *Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t#uw +Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf"u[ +Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858!u +Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw +Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU w5 +Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~ w *Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui *Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C )u- ,Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode(gI +Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~'w +Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm&ui +Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black%u +Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
$u' +Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * 0u ,Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
/u' ,Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t.uw ,Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf-u[ ,Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858,u ,Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt+uw ,Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU*w5 ,Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t7uw -Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf6u[ -Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168585u -Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt4uw -Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU3w5 -Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~2w ,Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm1ui ,Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
e r+V: e D9
7c7eaf7933e4baf3cf7625220da22e524fe3ed89a2e6b6796e753638c6af6de5D8
27630533e7ce471a5218ba93882e15e857abb3262a57b550aa04a27de283e57aD7
fc069c671947a77de565e36b545682f1a73f32c53725d79715125c1c12e518d0D6
fc0d3c5609c739acc6d67bf0bff0c3ce7d1a05383836701bcb21e55aea34acefD5
61dc6bb4a8a0afa5abfca5dbd6cc89799609dd46cb583de0e51dde496c7b2a30D4
e964887b330c27510a0b5b1eb8c31a8c5eda05bde74e42a145bea54bb240d335D3
48733bcb59a63cace889d40e1387badbc9621da7fad0ddcd0d198e83f214e41fD2
f6f4af57d47fdebdd0de45acce2777a89181f31063e8511ded23c672de57fe99D1
757cbedb5a1d0d38a9479759f8661ec2fc0853efaf4ef184a79a5f96ef5b7a8eD0
22218edd785c94ee6fbbe5ded89195ece5e0450abc17b7afb225b4677b79f3f1D/
e311decc49b7ee2360283ef4b0704bc4c8dc2c2628d70e47cfff25b1e8583f72D.
1c826c2145a30350f476ab5a9a6151bd349415c6cab19956813fffb3b864a331D-
e17a8027f3820da82d6b20358ef0d2e8fb3c334ec7632d5262a93004b4cf2fbf
C nv C =u- .Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode<gI -Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~;w -Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm:ui -Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black9u -Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
8u' -Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Du .Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Cu' .Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tBuw .Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfAu[ .Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858@u .Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt?uw .Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU>w5 .Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tKuw /Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfJu[ /Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Iu /Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStHuw /Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUGw5 /Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Fw .Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormEui .Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Qu- 0Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modePgI /Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Ow /Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormNui /Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackMu /Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Lu' /Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Xu 0Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Wu' 0Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tVuw 0Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfUu[ 0Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Tu 0Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStSuw 0Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorURw5 0Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t_uw 1Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf^u[ 1Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858]u 1Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt\uw 1Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU[w5 1Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Zw 0Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormYui 0Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C eu- 2Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modedgI 1Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~cw 1Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormbui 1Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackau 1Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
`u' 1Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * lu 2Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
ku' 2Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tjuw 2Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfiu[ 2Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858hu 2Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStguw 2Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUfw5 2Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tsuw 3Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfru[ 3Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858qu 3Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStpuw 3Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUow5 3Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~nw 2Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormmui 2Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C yu- 4Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modexgI 3Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ww 3Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormvui 3Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackuu 3Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
tu' 3Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u 4Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' 4Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t~uw 4Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf}u[ 4Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858|u 4Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt{uw 4Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUzw5 4Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw 5Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ 5Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u 5Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw 5Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 5Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w 4Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui 4Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C
u- 6Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI 5Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ w 5Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm
ui 5Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black u 5Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' 5Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u 6Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' 6Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw 6Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ 6Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u 6Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw 6Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 6Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw 7Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ 7Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u 7Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw 7Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 7Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w 6Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui 6Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C !u- 8Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI 7Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ w 7Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui 7Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black u 7Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' 7Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * (u 8Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
'u' 8Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t&uw 8Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf%u[ 8Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858$u 8Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt#uw 8Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU"w5 8Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t/uw 9Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf.u[ 9Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858-u 9Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt,uw 9Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU+w5 9Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~*w 8Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm)ui 8Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C 5u- :Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode4gI 9Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~3w 9Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm2ui 9Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black1u 9Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
0u' 9Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
e r+V: e DF
b6052b91db5ed4e063fd850d975d05689cc9b1996c06638c4d251659b128c9acDE
d4fd0adcfbd04fb5365175b9d356f5d3f697870607c655b2853cc010c8514ce7DD
5b93e870e57b80682109021a45ee40d59a50ca460b054a2fdff648fe118c7ec0DC
07e3f6b9b256a115590234dc0183bcf39f3cd1e274bd4d7506c4ae4992f8adedDB
9d8f6d50998e1ddcbcad83e5a929b89aebdccffb0d09afca0a5d451591034494DA
8bcc89f7bef113e056e226e9e5c3e3be2396e0d1fa312a4a061ee85ad8c52a3aD@
6db6194f7a398d0d7abc7755a2f9fc2b6887cd20921eaa12f12ae087c8d48816D?
97de078974c76f22114377981f82fac9312b4ce5e781ef81172b4cf2d22a8cf2D>
8c834bac2f30be752f112c1cc6098fa621dd2400df835b51ee13e22bd5c05807D=
3d48adfd65237fbd521c95fe26d5d4f17e03f7af968c2b5cd036e099d635d188D<
61679ab7934366aedce5be340b71089ee0a1460bac5c95cb884fc6059f1bb7a1D;
5578da34b6bdd59f584a7e2baf29876c99b00d2684ede1967f37ca2d95b787a3D:
a056997b96782b4b457a7404dada83836f46133ac10579459e04c22a64697b3f
* &%C * <u :Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
;u' :Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t:uw :Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf9u[ :Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168588u :Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt7uw :Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU6w5 :Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tCuw ;Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfBu[ ;Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Au ;Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt@uw ;Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU?w5 ;Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~>w :Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm=ui :Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Iu- <Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeHgI ;Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Gw ;Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormFui ;Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackEu ;Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Du' ;Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Pu <Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Ou' <Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tNuw <Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfMu[ <Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Lu <Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStKuw <Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUJw5 <Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tWuw =Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfVu[ =Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Uu =Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStTuw =Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUSw5 =Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Rw <Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormQui <Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C ]u- >Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode\gI =Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~[w =Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormZui =Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackYu =Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Xu' =Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * du >Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
cu' >Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tbuw >Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfau[ >Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858`u >Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt_uw >Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU^w5 >Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog bR %RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ %~L %S %Y %` %g %m %t %{ % % % % % %# %) %0 %7 %= %D %K %Q %X %_ %e %l %s %y % % %
% % %! %( %/ %5 %< %C %I %P %W %] %d %k %q %x % % % % % % %' %- %4 %; %A %H %O %U %\ %c %i %p %w %Á} %ā %Ł %Ɓ %ǁ %ȁ %Ɂ% %ʁ, %ˁ3 %́9 %@ %ρG %ЁM %сT %ҁ[ %Ӂa %ԁh %Ձo %ցu %ׁ| % %ف %ځ %ہ %܁ %݁$ %ށ+ %߁1 %8 %? %E %L %S
P
32 P tkuw ?Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfju[ ?Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858iu ?Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSthuw ?Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUgw5 ?Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~fw >Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormeui >Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C qu- @Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modepgI ?Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ow ?Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormnui ?Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackmu ?Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
lu' ?Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * xu @Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
wu' @Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tvuw @Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfuu[ @Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858tu @Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStsuw @Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUrw5 @Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw ACaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf~u[ ACaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858}u ACaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt|uw ACaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU{w5 AStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~zw @Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormyui @Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- BCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI AEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w AStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui ACaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku ACaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' ACaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u BCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' BCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t
uw BCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf u[ BCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u BCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw BCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 BStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw CCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ CCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u CCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw CCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 CStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w BStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm
ui BCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- DCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI CEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w CStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui CCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku CCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' CCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u DCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' DCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t uw DCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf u[ DCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u DCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw DCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 DStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t'uw ECaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf&u[ ECaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858%u ECaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt$uw ECaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU#w5 EStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~"w DStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm!ui DCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C -u- FCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode,gI EEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~+w EStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm*ui ECaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black)u ECaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
(u' ECaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * 4u FCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
3u' FCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t2uw FCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf1u[ FCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168580u FCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt/uw FCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU.w5 FStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t;uw GCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf:u[ GCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168589u GCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt8uw GCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU7w5 GStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~6w FStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm5ui FCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
e r+V: e DS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 nv C Au- HCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode@gI GEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~?w GStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm>ui GCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black=u GCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
<u' GCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Hu HCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Gu' HCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tFuw HCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfEu[ HCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Du HCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStCuw HCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUBw5 HStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tOuw ICaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfNu[ ICaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Mu ICaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStLuw ICaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUKw5 IStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Jw HStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormIui HCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Uu- JCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeTgI IEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Sw IStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormRui ICaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackQu ICaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Pu' ICaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * \u JCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
[u' JCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tZuw JCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfYu[ JCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Xu JCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStWuw JCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUVw5 JStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tcuw KCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfbu[ KCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858au KCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt`uw KCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU_w5 KStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~^w JStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm]ui JCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C iu- LCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modehgI KEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~gw KStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormfui KCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackeu KCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
du' KCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * pu LCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
ou' LCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tnuw LCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfmu[ LCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858lu LCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStkuw LCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUjw5 LStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P twuw MCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfvu[ MCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858uu MCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSttuw MCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUsw5 MStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~rw LStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormqui LCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C }u- NCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode|gI MEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~{w MStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormzui MCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackyu MCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
xu' MCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u NCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' NCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw NCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ NCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u NCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw NCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU~w5 NStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t uw OCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf
u[ OCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u OCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw OCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 OStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w NStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui NCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- PCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI OEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w OStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui OCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
u OCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' OCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u PCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' PCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw PCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ PCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u PCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw PCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 PStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t uw QCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf u[ QCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u QCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw QCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 QStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w PStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui PCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C %u- RCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode$gI QEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~#w QStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm"ui QCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black!u QCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' QCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * ,u RCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
+u' RCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t*uw RCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf)u[ RCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858(u RCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt'uw RCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU&w5 RStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t3uw SCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf2u[ SCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168581u SCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt0uw SCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU/w5 SStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~.w RStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm-ui RCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C 9u- TCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode8gI SEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~7w SStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm6ui SCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black5u SCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
4u' SCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
e r+V: e D`
0f9b27fa945a2929eef54b26fe1fa8010d7cbd461cd3c645fb8cc62de85d5a8bD_
cbdf552514fc3c8f3e787e174fe5b17897007c1d1e76bf0565f3c48969b03d86D^
a03be94a199377cb1c5614368a415c0540f04e2d6bc74e7bfbe1a1dd0c525128D]
afb7e36e5aaec8646bbdfa039bbfe6972eb157211104d1286ea36f29c07af0fbD\
dc5b0b3c78dcae2b3bf5f5c9dcbcf24534372b9e13c9464c300a0017948eaf99D[
0dc167d2f05541662cc1bfe1773d78ea0566b4fae06130399f47b0f01f34e177DZ
2663e6a78d254c25af0632b96caa6ae85c1a93cf308dc522b9e8bfaa334d9f2eDY
6597772d1fa9bdcbb982220b4e56bd13fb3a65b1ccdee0a911f8e5af3f58d188DX
1cb47e9ddc0c4d017161325b321b5a50d4645ac07758b0d9cc09ce6180bce014DW
4bd28dce0b162f8a2da3d74b80a28f0bed475feb3b13bc07076dbd9447d2deaaDV
15dbef5a2991f085e58a23e6a7047ea54e528a6f93b07a28839c0b6e3ed48c5eDU
e53316518deaff6343f609e95cac017e8bde5012d97256307e5dfb033e102c0fDT
f062b9d33e6eee164c17233ffc747844edad4fb3865de2b1c409d81837aff544
* &%C * @u TCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
?u' TCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t>uw TCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf=u[ TCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858<u TCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt;uw TCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU:w5 TStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tGuw UCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfFu[ UCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Eu UCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStDuw UCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUCw5 UStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Bw TStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormAui TCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Mu- VCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeLgI UEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Kw UStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormJui UCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackIu UCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Hu' UCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Tu VCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Su' VCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tRuw VCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfQu[ VCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Pu VCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStOuw VCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUNw5 VStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t[uw WCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfZu[ WCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Yu WCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStXuw WCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUWw5 WStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Vw VStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormUui VCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C au- XCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode`gI WEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~_w WStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm^ui WCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black]u WCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
\u' WCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * hu XCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
gu' XCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tfuw XCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfeu[ XCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858du XCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStcuw XCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUbw5 XStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P touw YCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfnu[ YCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858mu YCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStluw YCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUkw5 YStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~jw XStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormiui XCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C uu- ZCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modetgI YEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~sw YStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormrui YCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackqu YCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
pu' YCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * |u ZCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
{u' ZCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tzuw ZCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfyu[ ZCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858xu ZCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStwuw ZCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUvw5 ZStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw [Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ [Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u [Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw [Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 [Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~~w ZStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm}ui ZCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- \Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI [Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w [Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui [Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku [Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' [Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u \Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' \Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw \Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf
u[ \Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u \Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw \Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU
w5 \Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw ]Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ ]Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u ]Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw ]Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 ]Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w \Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui \Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- ^Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI ]Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w ]Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui ]Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku ]Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' ]Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * $u ^Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
#u' ^Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t"uw ^Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf!u[ ^Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u ^Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw ^Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU w5 ^Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t+uw _Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf*u[ _Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858)u _Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt(uw _Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU'w5 _Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~&w ^Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm%ui ^Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C 1u- `Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode0gI _Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~/w _Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm.ui _Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black-u _Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
,u' _Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * 8u `Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
7u' `Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t6uw `Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf5u[ `Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168584u `Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt3uw `Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU2w5 `Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t?uw aCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf>u[ aCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858=u aCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt<uw aCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU;w5 aStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~:w `Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm9ui `Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
e r+V: e Dm
11803c3ea95efe8e996c12cad83271ef43838dbf25dae72ab9afc3954d65639bDl
8090afe9c1843d71bfe8d10d6b4076aea3559e86d8fa4c232dee54817c5b76fbDk
63bb7c514d317f810847e161cd7afb196f824e9b410a73c8e0ce05df376c310aDj
3650ca3ecdb13198b3e14e49b52b7dd911c3839ba77826f5b2dbd315026cc82fDi
ad6e6798e24fe8a37ac1aed9a3116bcf96b19cb797d6e59a4cbc7979cc334522Dh
cdfa438ee0d5eaf9ebf066c879fea0ad0e14ef3381353d9d8a8f249ff220b2afDg
3fe9c9d1c5627efcbd130b935885968a811be55b5028953a858e8517243e5d5aDf
08fe4123c9f2d5699c800a7e884d1f8f6958f6ec8448ac152f214735fd9ba5f9De
25e553164777a8317ea8977d7a80cabc995d717d2c470f08b6c043bdce419cd6Dd
4598ab08f211c59a2ee7f9d85a2e2c7a4f7b8845e0d7ac7dbfbb570230111cf0Dc
beef6f9a15afb17e466001549c5ab96b1b00d12812239114ab0ee733cba615f3Db
d04f4f2c802e659ebc50e30c425e08c36096ac47223dc795afdd8d19c31aeed9Da
f6c41df4e2079f35e9de7d6585897bf99e364b1eb18aa9ec79d9e20b9766f5e4
C nv C Eu- bCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeDgI aEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Cw aStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormBui aCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackAu aCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
@u' aCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Lu bCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Ku' bCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tJuw bCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfIu[ bCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Hu bCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStGuw bCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUFw5 bStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tSuw cCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfRu[ cCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Qu cCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStPuw cCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUOw5 cStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Nw bStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormMui bCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Yu- dCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeXgI cEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Ww cStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormVui cCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackUu cCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Tu' cCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * `u dCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
_u' dCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t^uw dCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf]u[ dCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858\u dCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt[uw dCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUZw5 dStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tguw eCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresffu[ eCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858eu eCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStduw eCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUcw5 eStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~bw dStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormaui dCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C mu- fCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modelgI eEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~kw eStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormjui eCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackiu eCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
hu' eCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * tu fCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
su' fCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849truw fCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfqu[ fCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858pu fCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStouw fCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUnw5 fStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t{uw gCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfzu[ gCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858yu gCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStxuw gCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUww5 gStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~vw fStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormuui fCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- hCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI gEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w gStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm~ui gCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black}u gCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
|u' gCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u hCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' hCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw hCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ hCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u hCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw hCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 hStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw iCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ iCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858
u iCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw iCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU w5 iStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~
w hStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui hCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- jCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI iEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w iStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui iCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku iCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' iCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u jCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' jCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw jCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ jCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u jCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw jCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 jStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t#uw kCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf"u[ kCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858!u kCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw kCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU w5 kStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~ w jStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui jCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C )u- lCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode(gI kEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~'w kStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm&ui kCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black%u kCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
$u' kCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * 0u lCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
/u' lCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t.uw lCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf-u[ lCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858,u lCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt+uw lCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU*w5 lStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t7uw mCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf6u[ mCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168585u mCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt4uw mCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU3w5 mStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~2w lStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm1ui lCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C =u- nCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode<gI mEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~;w mStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm:ui mCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black9u mCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
8u' mCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
e r+V: e Dz
34269e92e56a1ed2e47570b48ed01530719dca4cb561baa301db389d679afdb1Dy
b909289acabf305cfeb8f77f4351ab4fa67c1a023c392ae4e326c32ba911376bDx
946e0d4202b53b3b065d23a43e6a5a0a32f61836c1b7305ec2a65d63b2fa48d0Dw
767a5d433dc92613d0cab0185b37f0fa6590e1823a9bc7f2ece1abc592069bd5Dv
400558346b5b54b33a80390a5849a1a330722cdff9436c07acf3e168b477330eDu
237720a4e9199e2738ab3196d8e7c59b9fa4ba4d4dfc2395b09b8670e45f802cDt
fb54396129c15361020a0307c4dd42f46da87f1c0a0841e0d0ee3ee404ce59bdDs
687ed68537f2f9b2bc7c1f4aa45d061f8e36a38d93c1b7144cf2b6e35157001eDr
353fc523cad5efc4cbbcfc1283eb522f0f97dcaeacf8fed02b5b71b895fe4f26Dq
637d3a56cc4d58c44384c03a0e5fd138ce60d2aafd7d584dd7f66e53cbeb3049Dp
80390bf3a08ba0f650c404d34722110ba6e30e0aa373d82bb1bc2d8d2d7d31baDo
b3c269833837e02c07b59ed5f8a0595794f5ae6d92b3d90ba420bd82eed56ffcDn
1dcf380a319a132c90457bf82f10d67e9fb2f0795535e4a430c15eba981edeef
* &%C * Du nCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Cu' nCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tBuw nCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfAu[ nCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858@u nCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt?uw nCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU>w5 nStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tKuw oCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfJu[ oCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Iu oCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStHuw oCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUGw5 oStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Fw nStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormEui nCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Qu- pCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modePgI oEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Ow oStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormNui oCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackMu oCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Lu' oCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Xu pCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Wu' pCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tVuw pCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfUu[ pCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Tu pCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStSuw pCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorURw5 pStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t_uw qCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf^u[ qCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858]u qCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt\uw qCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU[w5 qStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Zw pStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormYui pCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C eu- rCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modedgI qEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~cw qStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormbui qCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackau qCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
`u' qCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * lu rCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
ku' rCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tjuw rCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfiu[ rCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858hu rCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStguw rCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUfw5 rStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tsuw sCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfru[ sCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858qu sCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStpuw sCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUow5 sStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~nw rStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormmui rCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C yu- tCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modexgI sEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ww sStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormvui sCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackuu sCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
tu' sCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u tCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' tCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t~uw tCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf}u[ tCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858|u tCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt{uw tCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUzw5 tStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw uCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ uCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u uCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw uCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 uStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w tStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui tCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C
u- vCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI uEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ w uStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm
ui uCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black u uCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' uCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u vCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' vCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw vCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ vCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u vCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw vCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 vStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw wCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ wCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u wCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw wCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 wStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w vStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui vCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C !u- xCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI wEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ w wStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui wCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black u wCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' wCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * (u xCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
'u' xCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t&uw xCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf%u[ xCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858$u xCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt#uw xCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU"w5 xStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t/uw yCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf.u[ yCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858-u yCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt,uw yCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU+w5 yStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~*w xStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm)ui xCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C 5u- zCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode4gI yEike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~3w yStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm2ui yCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black1u yCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
0u' yCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * <u zCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
;u' zCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t:uw zCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf9u[ zCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168588u zCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt7uw zCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU6w5 zStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tCuw {Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfBu[ {Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Au {Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt@uw {Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU?w5 {Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~>w zStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm=ui zCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
e r+V: e D
55ad97e23070c92807ae6019da970533404496ea9c55b2581bb34f2be3b54cd0D
beaba5748ba50e7e5eb175940f2356990aa23d1176560268068ee630c38f3953D
7a0d7cf0562ad8c11ff90029a2c2cd9fd83de148afbd1a8db3fb79e0d11ffbfaD
e71a307c1ef8b62e83a97e331815cedb4e6c75a9c53468d64a42013fc4038c08D
16e1a4a30424173e656cc48c68ae55bac63aeb586b1cd0e94eca634d8e1f153eD
70ab660529559dbc0857824877d03fb7953ba5e86fde837ba44bd5f6d5ee3adfD
93506197bcd7012844761bc83df82a2fa27d417449b0cc8377a4f2fa84277d60D
95534a4322ef4fc7dfa9b623b1de5cd5d0d72c43f81f18b07d085100fc928858D
61ec12fb0832b09ad331cdf362aebd011e7d319697b112abc7430ee0ffc4bcdbD~
e81e2d49de42c4084b831416da43610e82111f1e2bf57b09c2cfecdedc32e6d9D}
bb264f253989b30cd12094f3d2e34773de2ffb9f77472b7bd12673eb092157aeD|
033cc5d8ff989f638033f0a6af82cb11c2d68d26fc602668a0a4c9673a09ef9cD{
a8415679884139db5b73792b19bc658a4e15f201e4f2b05c40f0e3f88e5e9a96
C nv C Iu- |Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeHgI {Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Gw {Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormFui {Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackEu {Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Du' {Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Pu |Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Ou' |Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tNuw |Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfMu[ |Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Lu |Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStKuw |Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUJw5 |Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tWuw }Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfVu[ }Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Uu }Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStTuw }Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUSw5 }Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Rw |Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormQui |Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C ]u- ~Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode\gI }Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~[w }Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormZui }Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackYu }Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Xu' }Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * du ~Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
cu' ~Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tbuw ~Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfau[ ~Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858`u ~Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt_uw ~Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU^w5 ~Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tkuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfju[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858iu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSthuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUgw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~fw ~Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormeui ~Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C qu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modepgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ow Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormnui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackmu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
lu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * xu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
wu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tvuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfuu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858tu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStsuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUrw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog bR &ORY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ %` %g %m %t %{ % % % % % %# %) %0 %7 %= %D %K %Q %X %_ %e %l %s %y & & &
& & &! &( &/ &5 & < &
C & I &
P &W &] &d &k &q &x & & & & & & &' & - & 4 & ; & A &!H &"O &#U &$\ &%c &&i &'p &(w &)} &* &+ &, &- &. &/% &0, &13 &29 &3@ &4G &6M &7T &8[ &9a &:h &;o &<u &=| &> &? &@ &A &B &C$ &D+ &E1 &F8 &G? &HE &JL &KS &LY &M` &Ng
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf~u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858}u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt|uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU{w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~zw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormyui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t
uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm
ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t'uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf&u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858%u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt$uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU#w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~"w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm!ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C -u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode,gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~+w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm*ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black)u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
(u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * 4u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
3u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t2uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf1u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168580u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt/uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU.w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t;uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf:u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168589u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt8uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU7w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~6w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm5ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Au- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode@gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~?w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm>ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black=u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
<u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
e r+V: e D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* &%C * Hu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Gu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tFuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfEu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Du Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStCuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUBw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tOuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfNu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Mu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStLuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUKw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Jw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormIui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Uu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeTgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Sw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormRui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackQu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Pu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * \u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
[u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tZuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfYu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Xu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStWuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUVw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tcuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfbu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858au Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt`uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU_w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~^w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm]ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C iu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modehgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~gw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormfui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackeu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
du' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * pu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
ou' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tnuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfmu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858lu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStkuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUjw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P twuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfvu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858uu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSttuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUsw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~rw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormqui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C }u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode|gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~{w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormzui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackyu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
xu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU~w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf
u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C %u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode$gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~#w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm"ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black!u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * ,u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
+u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t*uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf)u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858(u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt'uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU&w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t3uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf2u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168581u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt0uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU/w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~.w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm-ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C 9u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode8gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~7w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm6ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black5u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
4u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * @u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
?u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t>uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf=u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858<u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt;uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU:w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tGuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfFu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Eu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStDuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUCw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Bw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormAui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
e r+V: e D!
38f6f38400a02dfd304ef361c147ae8587357a50cec7a0113047ebd33cf7c5e3D
73e6c1345f450c5929eb00e5f4f97abca74086756ad6e3bd8c36e85d989c8283D
b1e13bff131933637fb9b843f0d5f4c6cb81232f5b53ac058376a71010948f6bD
4a1f2f949b103bdfe54eebc6b4963f047de93b1a0cc47cfa795070d2edcf457dD
42cd49e0abb9c9f367848467f27274693443d3037a447b74cde10b94706c4a80D
73e7e5f1dff51614ddae5538cafc528cb724c6dcfb3a9b9459be4d82230e5160D
73d0fdb5a95bdec295481af2bf2057fc8d78d8110d2f95f3bb7c85577a034eb7D
f1f8e68da43d3543c537c23e696bea84b8c7e225d2a8e638f1d3e6b4c768f286D
db7d1e186c2ae291d66b611f4323aa29b919d87a3e6ea1478b9cb9b642e60f17D
ecb37964581de31750352b4a0c77e2efd6f71b55d33d488cc7d2460a0a00d744D
6ac785b4fd5c3fbb3f1b4107b21e46b2cbdc7e63216e249d74bdbc43d05c70c5D
cd9f701311cf726c8b434a5ee4f0f2cb6e0df53b5a843c3ce0633217921b81dbD
b4f762ba7ffb9fcb803ea8da5868bfe7d15e7777c60e6f0f4f2f4a4d3f90cb50
C nv C Mu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeLgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Kw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormJui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackIu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Hu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Tu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Su' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tRuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfQu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Pu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStOuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUNw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t[uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfZu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Yu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStXuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUWw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Vw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormUui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C au- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode`gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~_w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm^ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black]u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
\u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * hu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
gu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tfuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfeu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858du Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStcuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUbw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P touw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfnu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858mu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStluw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUkw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~jw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormiui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C uu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modetgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~sw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormrui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackqu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
pu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * |u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
{u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tzuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfyu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858xu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStwuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUvw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm}ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf
u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU
w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * $u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
#u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t"uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf!u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t+uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf*u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858)u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt(uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU'w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~&w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm%ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C 1u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode0gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~/w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm.ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black-u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
,u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * 8u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
7u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t6uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf5u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168584u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt3uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU2w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t?uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf>u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858=u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt<uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU;w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~:w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm9ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Eu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeDgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Cw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormBui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackAu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
@u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
e r+V: e D.
11476c0df825b8cf64558132ab6c00817fd04a45533f011c2784f1a0df797631D-
7eebede496a10ef7610a306704e8b7a5ad7104bef3763ae5d089c514d1656a99D,
9313b35402e85897b582429f4df8f344b42d30cec4731079c2c5f5a680fcc839D+
7ae117b77c126ac691263ef8d207cc3c2dd9ed5f34f138e411d09ae4a6122407D*
ec25d05d782c32b42db9e24ba4c9449d7fc9c689e3d0fa711ce8f94c261ce6b7D)
044fa462d51c4d22a5eb8db06de4ed95a23b6e26336c54e16ea3417cd87a5981D(
2c6bfa0e8aa6838cc1b81537932ca579cbd93cc93d440a8a7c84b5342ca0a123D'
598ff4789a5b089a81ead99e67555f293c41e08b2771cb5d1eb4868f669d0894D&
598f5c1de287046f5cbd57cfaf3cc1d9daa8acbbcfe94363eda1070339b435a8D%
604d0dced14a23f9e7eefa1abb0d32242d50b5ad9b6bc699114284e55ffc288fD$
73a833b69925445587e5e902cf5b0432e6cdf5d8c184064ea6f735ed11d28452D#
ede6fc896f82acb407c88ed425d1c7fa8420645aae77c5aaea694f1c692cbc45D"
5df62ba637b7f77964da2d97a25f63cdec28f90a8dfa76b05a4080f7aa03b3a2
* &%C * Lu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Ku' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tJuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfIu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Hu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStGuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUFw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tSuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfRu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Qu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStPuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUOw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Nw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormMui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Yu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeXgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Ww Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormVui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackUu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Tu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * `u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
_u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t^uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf]u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858\u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt[uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUZw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tguw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresffu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858eu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStduw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUcw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~bw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormaui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C mu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modelgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~kw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormjui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackiu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
hu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * tu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
su' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849truw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfqu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858pu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStouw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUnw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t{uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfzu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858yu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStxuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUww5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~vw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormuui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm~ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black}u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
|u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858
u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~
w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t#uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf"u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858!u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~ w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C )u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode(gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~'w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm&ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black%u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
$u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * 0u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
/u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t.uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf-u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858,u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt+uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU*w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t7uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf6u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168585u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt4uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU3w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~2w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm1ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C =u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode<gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~;w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm:ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black9u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
8u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Du Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Cu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tBuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfAu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858@u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt?uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU>w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tKuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfJu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Iu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStHuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUGw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Fw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormEui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
e r+V: e D;
9e499430d2fb2c6cb68c3ee8c7e80022d612bdba43e98c21c6cead204a19aee1D:
614857c396c65004fd986e7b0b3b669ea5f8880fc93c655a69ea8ff5177d58fbD9
75518cc294a25dd2bf8e7d7c0883cc13f46fbe3694ee431b5e7ac646eae722b4D8
cd15c26fb1146a5e8fc006618f54a1857a651b59524ad0b43e2de55f2ecdf4adD7
d21a1f7149813805ef3c6537ab7c9dee0567804a8f9983618aef692ed579f292D6
1627c36660c246a28b1b4c12b7bb6265a2948ecc122efd459f7d3a78959935e7D5
4d706aab7c08c3071b31ae66919573e924ce2400aa7bf07fb5eeea3a69a8bb73D4
d00284a41b68e575da476321841fba290849066dcd50949ee1f46e5984294f6aD3
e19a3d190b4be2dfd6bf0e58eb5017d6235b6dc0bc5b12d4b5d07c5dfdf34eecD2
b5962c01ec97042d7aa371253ae592a53b11214605721063be11027949cd9ee6D1
e5bed7d18f1cb03d90274c85c7eb780577a158e85aa2ac2af3e174486ae52f9dD0
b47475049748725638cfe057a54b45b2386eb621ed65e7dc441b3f6dff971e60D/
25eda2d5ea8c705770886b5cf7cf2643b509f198fe1feae97607f96210343f0f
C nv C Qu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modePgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Ow Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormNui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackMu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Lu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * Xu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Wu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tVuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfUu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Tu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStSuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorURw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t_uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf^u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858]u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt\uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU[w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Zw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormYui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C eu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modedgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~cw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormbui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackau Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
`u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * lu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
ku' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tjuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfiu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858hu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStguw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUfw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tsuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfru[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858qu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStpuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUow5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~nw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormmui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C yu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modexgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ww Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormvui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackuu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
tu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t~uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf}u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858|u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt{uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUzw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C
u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm
ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C !u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * (u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
'u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t&uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf%u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858$u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt#uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU"w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P t/uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf.u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858-u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt,uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU+w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~*w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm)ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C 5u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode4gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~3w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm2ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black1u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
0u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * <u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
;u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t:uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf9u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-168588u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt7uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU6w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tCuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfBu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Au Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt@uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU?w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~>w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm=ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C Iu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modeHgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~Gw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormFui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackEu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Du' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
e r+V: e DH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@
b4a0638e6c66b83b32396e053b68f71ce9f9c0846f117e75c3223af733c923b9D?
1a8201b73f71ee44efe72426328fc48ad33413143a7f40a898fb7b926034487fD>
08d1d1cc28a0a4caf172ffb26c59f35532cb13b37543dc1b44895666f5c4d486D=
93b059a3da417ccc61646327c6d1ed94b3a83a59eea67aeb8419f44ebb5522d3D<
2cc2e0d90af5e45dd0446328fe940a605fcb5aeaa3c115959be8469b6f134c83
* &%C * Pu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Ou' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tNuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfMu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Lu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStKuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUJw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tWuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfVu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858Uu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStTuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUSw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~Rw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormQui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C ]u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode\gI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~[w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormZui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackYu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
Xu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * du Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
cu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tbuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfau[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858`u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt_uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU^w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tkuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfju[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858iu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSthuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUgw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~fw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormeui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C qu- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modepgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~ow Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormnui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blackmu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
lu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * xu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
wu' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849tvuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfuu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858tu Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStsuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUrw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf~u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858}u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt|uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorU{w5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~zw Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormyui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
C nv C u- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation modegI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
* &%C * u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849t
uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresf u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog bR &RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ &Pt &Q{ &R &S &T &U &V &W# &X) &Y0 &Z7 &[= &\D &]K &_Q &`X &a_ &be &cl &ds &ey &f &g &h
&i &j &k! &l( &m/ &n5 &o< &pC &qI &sP &tW &u] &vd &wk &xq &yx &z &{ &| &~ & & & & & &" &% &' &) &* &, &/ &1 &3 &4 &6 &9 &; &= &> &@ &D &F &L &O &R &W &Z &] &b &e &g &l &o &q &w &{ & & &
& & & & &% &) &. &2 &7 &; &A &F &K &Q
P
32 P tuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n- Resolves: rhbz#1066844 drop libreofficekit requiresfu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858u Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPStuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC- Resolves: rhbz#1610904 draw glitches in drag cursorUw5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm
ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is black
nv TkA Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.11-2T- Make tests port agnosticgI Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer~w Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendormui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24])- Resolves: rhbz#1728763 bg of blocks is blacku Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck
u' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849
tk Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.13-1T7- Fix ABI compatibility (RhBug: 1185180)
- fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
- downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
- Make building tests and docs optional
- librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)iki Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.12-1T@- downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
- downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
- downloader: Show also calculated checksums in error message about bad checksum
- Python: Return all strings in unicode
a a j km Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-2TA- compat: fix ck_assert_msg() segfault in rhel-7, ko Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-1T@- tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
- Add LRO_OFFLINE
- Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
- Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
- Add LR_VERSION constant with version string
- python: Import contants from C librepo module in a loop
- repoconf: Add support for failover and skip_if_unavailable options
- handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
- Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
- util: Add lr_is_local_path()
- New module repoconf for reading *.repo files
- Add LRO_HTTPHEADER option (RhBug: 1181123)
gC Colin Walters <walters@redhat.com> - 1.7.15-2UQ@- Disable tests and drop python-flask build dependency on RHEL7, as
it is not in the cores k} Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.15-1U-@- Do not inlude header in the body output (RhBug: 1207685)
- metalink: Proper error handling
- New LRR_RPMMD_* contants
- Support for client certificates
- Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
- CMakeLists.txt: do not check for CXX
- build: Use solely pkg-config to find glib
. . M g5 Colin Walters <tmlcoch@redhat.com> - 1.7.16-1UhT- Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
- downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
- test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
- repoconf: Proper handling of gint64 and guint64 types
- build: Be compatible with cmake 2.8
- handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
- utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
- Python: call lr_global_init() during module initialization
- Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
- util: Honor RFC 3986 (Issue #55)
J J i"]y Ales Matej <amatej@redhat.com> - 1.8.1-8_5+@- Validate paths read from repomd.xml (RhBug: 1866500)D!_+ Marek Blaha <mblaha@redhat.com> - 1.8.1-1[o- Add yumrecord substitution mechanism (mluscon)
- Fix a memory leak in signature verification (cwalters)
- Add new option LRO_FTPUSEEPSV
- downloader prepare_next_transfer(): simplify long line
- downloader prepare_next_transfer(): add missing error check
- downloader prepare_next_transfer(): cleanup error path
- downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
- handle: Don't use proxy cache for downloads of metalink/mirrorlist
- handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
- downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
- Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
- New test: always try to download from the fastest mirror (Alexander Todorov)
: t%k Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.13-1T7- Fix ABI compatibility (RhBug: 1185180)
- fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
- downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
- Make building tests and docs optional
- librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)i$ki Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.12-1T@- downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
- downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
- downloader: Show also calculated checksums in error message about bad checksum
- Python: Return all strings in unicodeT#kA Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.11-2T- Make tests port agnostic
a a j'km Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-2TA- compat: fix ck_assert_msg() segfault in rhel-7,&ko Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-1T@- tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
- Add LRO_OFFLINE
- Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
- Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
- Add LR_VERSION constant with version string
- python: Import contants from C librepo module in a loop
- repoconf: Add support for failover and skip_if_unavailable options
- handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
- Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
- util: Add lr_is_local_path()
- New module repoconf for reading *.repo files
- Add LRO_HTTPHEADER option (RhBug: 1181123)
)gC Colin Walters <walters@redhat.com> - 1.7.15-2UQ@- Disable tests and drop python-flask build dependency on RHEL7, as
it is not in the cores(k} Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.15-1U-@- Do not inlude header in the body output (RhBug: 1207685)
- metalink: Proper error handling
- New LRR_RPMMD_* contants
- Support for client certificates
- Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
- CMakeLists.txt: do not check for CXX
- build: Use solely pkg-config to find glib
. . M*g5 Colin Walters <tmlcoch@redhat.com> - 1.7.16-1UhT- Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
- downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
- test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
- repoconf: Proper handling of gint64 and guint64 types
- build: Be compatible with cmake 2.8
- handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
- utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
- Python: call lr_global_init() during module initialization
- Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
- util: Honor RFC 3986 (Issue #55)
J J i,]y Ales Matej <amatej@redhat.com> - 1.8.1-8_5+@- Validate paths read from repomd.xml (RhBug: 1866500)D+_+ Marek Blaha <mblaha@redhat.com> - 1.8.1-1[o- Add yumrecord substitution mechanism (mluscon)
- Fix a memory leak in signature verification (cwalters)
- Add new option LRO_FTPUSEEPSV
- downloader prepare_next_transfer(): simplify long line
- downloader prepare_next_transfer(): add missing error check
- downloader prepare_next_transfer(): cleanup error path
- downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
- handle: Don't use proxy cache for downloads of metalink/mirrorlist
- handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
- downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
- Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
- New test: always try to download from the fastest mirror (Alexander Todorov)
: t/k Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.13-1T7- Fix ABI compatibility (RhBug: 1185180)
- fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
- downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
- Make building tests and docs optional
- librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)i.ki Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.12-1T@- downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
- downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
- downloader: Show also calculated checksums in error message about bad checksum
- Python: Return all strings in unicodeT-kA Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.11-2T- Make tests port agnostic
a a j1km Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-2TA- compat: fix ck_assert_msg() segfault in rhel-7,0ko Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-1T@- tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
- Add LRO_OFFLINE
- Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
- Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
- Add LR_VERSION constant with version string
- python: Import contants from C librepo module in a loop
- repoconf: Add support for failover and skip_if_unavailable options
- handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
- Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
- util: Add lr_is_local_path()
- New module repoconf for reading *.repo files
- Add LRO_HTTPHEADER option (RhBug: 1181123)
3gC Colin Walters <walters@redhat.com> - 1.7.15-2UQ@- Disable tests and drop python-flask build dependency on RHEL7, as
it is not in the cores2k} Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.15-1U-@- Do not inlude header in the body output (RhBug: 1207685)
- metalink: Proper error handling
- New LRR_RPMMD_* contants
- Support for client certificates
- Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
- CMakeLists.txt: do not check for CXX
- build: Use solely pkg-config to find glib
. . M4g5 Colin Walters <tmlcoch@redhat.com> - 1.7.16-1UhT- Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
- downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
- test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
- repoconf: Proper handling of gint64 and guint64 types
- build: Be compatible with cmake 2.8
- handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
- utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
- Python: call lr_global_init() during module initialization
- Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
- util: Honor RFC 3986 (Issue #55)
J J i6]y Ales Matej <amatej@redhat.com> - 1.8.1-8_5+@- Validate paths read from repomd.xml (RhBug: 1866500)D5_+ Marek Blaha <mblaha@redhat.com> - 1.8.1-1[o- Add yumrecord substitution mechanism (mluscon)
- Fix a memory leak in signature verification (cwalters)
- Add new option LRO_FTPUSEEPSV
- downloader prepare_next_transfer(): simplify long line
- downloader prepare_next_transfer(): add missing error check
- downloader prepare_next_transfer(): cleanup error path
- downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
- handle: Don't use proxy cache for downloads of metalink/mirrorlist
- handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
- downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
- Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
- New test: always try to download from the fastest mirror (Alexander Todorov)
: t9k Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.13-1T7- Fix ABI compatibility (RhBug: 1185180)
- fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
- downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
- Make building tests and docs optional
- librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)i8ki Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.12-1T@- downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
- downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
- downloader: Show also calculated checksums in error message about bad checksum
- Python: Return all strings in unicodeT7kA Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.11-2T- Make tests port agnostic
a a j;km Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-2TA- compat: fix ck_assert_msg() segfault in rhel-7,:ko Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-1T@- tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
- Add LRO_OFFLINE
- Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
- Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
- Add LR_VERSION constant with version string
- python: Import contants from C librepo module in a loop
- repoconf: Add support for failover and skip_if_unavailable options
- handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
- Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
- util: Add lr_is_local_path()
- New module repoconf for reading *.repo files
- Add LRO_HTTPHEADER option (RhBug: 1181123)
=gC Colin Walters <walters@redhat.com> - 1.7.15-2UQ@- Disable tests and drop python-flask build dependency on RHEL7, as
it is not in the cores<k} Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.15-1U-@- Do not inlude header in the body output (RhBug: 1207685)
- metalink: Proper error handling
- New LRR_RPMMD_* contants
- Support for client certificates
- Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
- CMakeLists.txt: do not check for CXX
- build: Use solely pkg-config to find glib
. . M>g5 Colin Walters <tmlcoch@redhat.com> - 1.7.16-1UhT- Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
- downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
- test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
- repoconf: Proper handling of gint64 and guint64 types
- build: Be compatible with cmake 2.8
- handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
- utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
- Python: call lr_global_init() during module initialization
- Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
- util: Honor RFC 3986 (Issue #55)
J J i@]y Ales Matej <amatej@redhat.com> - 1.8.1-8_5+@- Validate paths read from repomd.xml (RhBug: 1866500)D?_+ Marek Blaha <mblaha@redhat.com> - 1.8.1-1[o- Add yumrecord substitution mechanism (mluscon)
- Fix a memory leak in signature verification (cwalters)
- Add new option LRO_FTPUSEEPSV
- downloader prepare_next_transfer(): simplify long line
- downloader prepare_next_transfer(): add missing error check
- downloader prepare_next_transfer(): cleanup error path
- downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
- handle: Don't use proxy cache for downloads of metalink/mirrorlist
- handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
- downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
- Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
- New test: always try to download from the fastest mirror (Alexander Todorov)
+ l& + +Dcu Paul Wouters <pwouters@redhat.com> - 3.25-2[:- Resolves: rhbz#1597322 Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendorsFCc+ Paul Wouters <pwouters@redhat.com> - 3.25-1[3|@- Resolves: rhbz#1591817 rebase libreswan to 3.25
- Resolves: rhbz#1536404 CERT_PKCS7_WRAPPED_X509 error
- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1574011 libreswan is missing a Requires: unbound-libs >= 1.6.6ABc! Paul Wouters <pwouters@redhat.com> - 3.23-4Z- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1553406 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted
- Resolves: rhbz#1572425 shared IKE SA leads to rekey interop issuesAc= Paul Wouters <pwouters@redhat.com> - 3.23-3Zz@- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update]
0 T 0 Fc] Paul Wouters <pwouters@redhat.com> - 3.25-6\X)@- Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated]
- Resolves: rhbz#1679735 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure'Ecm Paul Wouters <pwouters@redhat.com> - 3.25-5\@- Resolves: rhbz#1639404 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth
- Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
- Resolves: rhbz#1629902 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
- Resolves: rhbz#1623279 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11
- Resolves: rhbz#1625303 config: recursive include check doesn't work
- Resolves: rhbz#1664521 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are >= 3072 bits
Pr kLW Karel Zak <kzak@redhat.com> 2.23.2-58[<- fix #1594681 - [RHEL7.2] blkid does not output swap area_KWk Karel Zak <kzak@redhat.com> 2.23.2-57["X- add another ppc aliases to setarch (#1562125)xJg Paul Wouters <pwouters@redhat.com> - 3.25-9.1^@- Resolves: rhbz#1844621 Backport FIPS keysize fixes from RHEL80Ic Paul Wouters <pwouters@redhat.com> - 3.25-9]c- Resolves: rhbz#1724200 libreswan: XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire(Hco Paul Wouters <pwouters@redhat.com> - 3.25-8\s@- Resolves: rhbz#1686991 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE+Gcu Paul Wouters <pwouters@redhat.com> - 3.25-7\v{- Resolves: rhbz#1673105 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart
e r+V: e DU
e7aab445dd74ec3ddd4f7504b5e00f8b2f7024c95448fb6ee6de759e0517cac4DT
c57edeef8ad80c1218e8f3c5f03298b8e4c78de794ef89153d213f767d7e76e8DS
51a15a1f28637adcdf2f0d13e8d6a81017809612ab5a6a46dda8025be6f4aeecDR
e28f306d4893ec7a68589345b053be93e9d807543f263f0bbfd81eacefbc4c10DQ
07502ee4563c4bdc09b8d0b67eba7577aae0d6c871501af53b038aad8812d391DP
71f4e4bdc94d32ca413c40fe3666b5b8b0a092fc42d58ea96801a440297da553DO
7c1cc6ce8c70a7a3b07d877d8ba90c49382b8945d6695e986df3f69e3b59cc32DN
25fa10449317511df1bc80c25c0cc1e7bede87a02929b5c0676ce9957353a8d9DM
baa1991d1849681ae5e74f8eeb2d213f69221f0c76cbe0018df32bd8f5ec1cb6DL
0d2b3fa57c857e63e2bc038eba8140a308abe22d4261989634084fe5e9eb73bdDK
b0ddff8c5c64edbfff1b2f8f18cc330688586e6a01207ad39c6c30bbeffe82fbDJ
8bb27e3133d87750b1501993b54e0bc9006242f30c7f46e98b7e0bc0a450cf2fDI
a9491aa4d8fe481a24a189a9849cfe530d5eaeb3550b1364284bf6b8b7a5a76b
> \OWc Karel Zak <kzak@redhat.com> 2.23.2-61\@- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev(NW{ Karel Zak <kzak@redhat.com> 2.23.2-60\R@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login=MW% Karel Zak <kzak@redhat.com> 2.23.2-59[z@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed
G & G ZRW_ Karel Zak <kzak@redhat.com> 2.23.2-64^k@- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bitQWI Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.APW- Karel Zak <kzak@redhat.com> 2.23.2-62]Ik- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information
= n = =WW% Karel Zak <kzak@redhat.com> 2.23.2-59[z@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failedkVW Karel Zak <kzak@redhat.com> 2.23.2-58[<- fix #1594681 - [RHEL7.2] blkid does not output swap area_UWk Karel Zak <kzak@redhat.com> 2.23.2-57["X- add another ppc aliases to setarch (#1562125)DTg# Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]aSWm Karel Zak <kzak@redhat.com> 2.23.2-65^@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directory
, Sr , AZW- Karel Zak <kzak@redhat.com> 2.23.2-62]Ik- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information\YWc Karel Zak <kzak@redhat.com> 2.23.2-61\@- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev(XW{ Karel Zak <kzak@redhat.com> 2.23.2-60\R@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login
l a]Wm Karel Zak <kzak@redhat.com> 2.23.2-65^@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directoryZ\W_ Karel Zak <kzak@redhat.com> 2.23.2-64^k@- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit[WI Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.
v T# v (bW{ Karel Zak <kzak@redhat.com> 2.23.2-60\R@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login=aW% Karel Zak <kzak@redhat.com> 2.23.2-59[z@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failedk`W Karel Zak <kzak@redhat.com> 2.23.2-58[<- fix #1594681 - [RHEL7.2] blkid does not output swap area__Wk Karel Zak <kzak@redhat.com> 2.23.2-57["X- add another ppc aliases to setarch (#1562125)D^g# Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]
E E eWI Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.AdW- Karel Zak <kzak@redhat.com> 2.23.2-62]Ik- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information\cWc Karel Zak <kzak@redhat.com> 2.23.2-61\@- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev
; !; agWm Karel Zak <kzak@redhat.com> 2.23.2-65^@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directoryZfW_ Karel Zak <kzak@redhat.com> 2.23.2-64^k@- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit
v T# v (lW{ Karel Zak <kzak@redhat.com> 2.23.2-60\R@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login=kW% Karel Zak <kzak@redhat.com> 2.23.2-59[z@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failedkjW Karel Zak <kzak@redhat.com> 2.23.2-58[<- fix #1594681 - [RHEL7.2] blkid does not output swap area_iWk Karel Zak <kzak@redhat.com> 2.23.2-57["X- add another ppc aliases to setarch (#1562125)Dhg# Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]
E E oWI Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.AnW- Karel Zak <kzak@redhat.com> 2.23.2-62]Ik- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information\mWc Karel Zak <kzak@redhat.com> 2.23.2-61\@- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev
; !; aqWm Karel Zak <kzak@redhat.com> 2.23.2-65^@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directoryZpW_ Karel Zak <kzak@redhat.com> 2.23.2-64^k@- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit
3 K( 3 wwk Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagvvk Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCguii Andreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requires3tk} Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^?@- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-joinhsik Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16Drg# Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]
{k Andreas Schneider <asn@redhat.com> - 4.10.17-11`@- resolves: #1876839 - Fix double crash when requesting share mode lockzk% Andreas Schneider <asn@redhat.com> - 4.10.17-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issueskyiq Andreas Schneider <asn@redhat.com> - 4.10.17-9_:- related: #1853272 - Add back missing patch hunkspxiy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage
zVq wk Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagv k Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCgii Andreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requires3~k} Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^?@- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-joinh}ik Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16|k Andreas Schneider <asn@redhat.com> - 4.10.17-13`@- related: #1876839 - Fix double crash when requesting share mode lock
k Andreas Schneider <asn@redhat.com> - 4.10.17-11`@- resolves: #1876839 - Fix double crash when requesting share mode lockk% Andreas Schneider <asn@redhat.com> - 4.10.17-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issueskiq Andreas Schneider <asn@redhat.com> - 4.10.17-9_:- related: #1853272 - Add back missing patch hunkspiy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage
% z % p
iy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpagew k Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagvk Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCgii Andreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requiresk Andreas Schneider <asn@redhat.com> - 4.10.17-13`@- related: #1876839 - Fix double crash when requesting share mode lock
1 ~ 1 gii Andreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requiresck_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pkw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting servicesk Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock
k Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock k% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk iq Andreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunks
k% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issueskiq Andreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunkspiy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpagewk Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagvk Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DC
y wk Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagck_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pkw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting servicesk Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lockk Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock
k Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock k% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk iq Andreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunksp iy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage
P z I P w%k Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagz$k Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server roleP#k7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc"k_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254p!kw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services k Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock
)k Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock(k% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk'iq Andreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunksp&iy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage
z I z.k Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server roleP-k7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc,k_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254p+kw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services*k Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock
2k Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock1k% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk0iq Andreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunksp/iy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage
z I z7k Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server roleP6k7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc5k_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254p4kw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services3k Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock
;k% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk:iq Andreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunksp9iy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage{8k
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142
D y D zAk Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server roleP@k7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc?k_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254p>kw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services=k Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock<k Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock
~ Fk Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lockEk Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lockDk% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issueskCiq Andreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunks{Bk
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142
Q Q Q {Kk
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142zJk Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server rolePIk7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlcHk_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pGkw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services
I FK> I pQkw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting servicesPk Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lockOk Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lockNk% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issueskMiq Andreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunks5Lk Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict
e r+V: e Db
51eac9ff71e53c4175eb210efa8bffca4476cc9cd86104293d1ca7f714062a4eDa
9ce18db0c7edcdf3961e7086a8438b700e7bb5f91d89a4bca5049729c6b02228D`
862a87260cad27824364c01e25cd821b1fc2a084f3522fee0b5654d684839796D_
6d16c50325196936545ac4cbb31f743a7fdab2589124f05cedf47845149e1035D^
c072f12110aa95c982d941e51b30f703d3010b75f805ba9c70e921f74a87e54fD]
51252d279ae23e76f0eab56a60f8b34948a2cb91859a5ebcb4dd70f5b140ade0D\
374238fd13c46caa7cbfc40bb0504875bf89695119fdc6cdbf33ab47bd195079D[
431b22149fa33a26bb336eee9700dbf64d3ec3c03e9604c4203a06a8e35aab3cDZ
948dd58b9aa2d3fe20747516b2640cf6b85bdabed1557859baee0cec0fa8a25cDY
10b16b350ee16d3d6b97cb71b8b4c1f23359036277bb481e4ccc7cd698d26ed4DX
6c72e414ed7ca2608725b7230e3820171e7ceca0b47d1c5a4623b22e410f9c5eDW
9f70940adeedfa2ad404110adcb36a268faa97569dc2fc32c100eab4368a9c54DV
a941b5ad075b2f47806bea28420794a24bc7fb5373b6712a5d0b500ee6118759
FF 5Vk Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict{Uk
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142zTk Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server rolePSk7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlcRk_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254
6 tgr 6 P\k7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc[k_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pZkw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting servicesYk Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lockXk Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lockWk% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issues
@ S @ bk Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lockak% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesq`k{ Andreas Schneider <asn@redhat.com> - 4.10.16-20c
- resolves: #2119058 - Fix possible segfault in winbind5_k Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict{^k
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142z]k Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server role
z I zgk Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server rolePfk7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlcek_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pdkw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting servicesck Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock
V FK V plkw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting serviceskk Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lockqjk{ Andreas Schneider <asn@redhat.com> - 4.10.16-20c
- resolves: #2119058 - Fix possible segfault in winbind5ik Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict{hk
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142
FF qrk{ Andreas Schneider <asn@redhat.com> - 4.10.16-20c
- resolves: #2119058 - Fix possible segfault in winbind5qk Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict{pk
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142zok Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server rolePnk7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlcmk_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254
d 9 d Pxk7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlcwk_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pvkw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting servicesuk Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lockztk Andreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023csk_ Andreas Schneider <asn@redhat.com> - 4.10.16-23c@- resolves: #2154364 - Fix CVE-2022-38023
n S n z~k Andreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023c}k_ Andreas Schneider <asn@redhat.com> - 4.10.16-23c@- resolves: #2154364 - Fix CVE-2022-38023q|k{ Andreas Schneider <asn@redhat.com> - 4.10.16-20c
- resolves: #2119058 - Fix possible segfault in winbind5{k Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict{zk
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142zyk Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server role
Q Q Q {k
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142zk Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server rolePk7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc k_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pkw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services
Fjv c
k_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254p kw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting servicesrk} Andreas Schneider <asn@redhat.com> - 4.10.16-25d@- resolves: #2222250 - Fix netlogon capabilities level 2zk Andreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023ck_ Andreas Schneider <asn@redhat.com> - 4.10.16-23c@- resolves: #2154364 - Fix CVE-2022-38023qk{ Andreas Schneider <asn@redhat.com> - 4.10.16-20c
- resolves: #2119058 - Fix possible segfault in winbind5k Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict
+ ~ ck_ Andreas Schneider <asn@redhat.com> - 4.10.16-23c@- resolves: #2154364 - Fix CVE-2022-38023qk{ Andreas Schneider <asn@redhat.com> - 4.10.16-20c
- resolves: #2119058 - Fix possible segfault in winbind5k Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict{
k
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142z k Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server roleP k7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl
Z 8 Z miu Andreas Schneider <asn@redhat.com> - 4.10.15-5^@- resolves: #1831986 - Fix gencache for normal usersiim Andreas Schneider <asn@redhat.com> - 4.10.15-4^@- resolves: #1813017 - Fix smbclient log to fileUiE Andreas Schneider <asn@redhat.com> - 4.10.15-3^U@- Removed patch for #1634057|k Isaac Boukris <iboukris@redhat.com> - 4.10.15-2^- resolves: #1825505 - Compilation of samba sources fails on RHELvi Andreas Schneider <asn@redhat.com> - 4.10.15-1^- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directoriesrk} Andreas Schneider <asn@redhat.com> - 4.10.16-25d@- resolves: #2222250 - Fix netlogon capabilities level 2zk Andreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023
q| v i Andreas Schneider <asn@redhat.com> - 4.10.15-1^- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directoriesw k Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagvk Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCgii Andreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requires3k} Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^?@- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-joinhik Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16
@ 'I% @ v%k Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg$ii Andreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requires3#k} Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^?@- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-joinh"ik Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m!iu Andreas Schneider <asn@redhat.com> - 4.10.15-5^@- resolves: #1831986 - Fix gencache for normal usersi im Andreas Schneider <asn@redhat.com> - 4.10.15-4^@- resolves: #1813017 - Fix smbclient log to fileU iE Andreas Schneider <asn@redhat.com> - 4.10.15-3^U@- Removed patch for #1634057| k Isaac Boukris <iboukris@redhat.com> - 4.10.15-2^- resolves: #1825505 - Compilation of samba sources fails on RHEL
E ,N* E v-k Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg,ii Andreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requires3+k} Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^?@- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-joinh*ik Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m)iu Andreas Schneider <asn@redhat.com> - 4.10.15-5^@- resolves: #1831986 - Fix gencache for normal usersi(im Andreas Schneider <asn@redhat.com> - 4.10.15-4^@- resolves: #1813017 - Fix smbclient log to fileU'iE Andreas Schneider <asn@redhat.com> - 4.10.15-3^U@- Removed patch for #1634057w&k Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tag
[ ! [ i2im Andreas Schneider <asn@redhat.com> - 4.10.15-4^@- resolves: #1813017 - Fix smbclient log to fileU1iE Andreas Schneider <asn@redhat.com> - 4.10.15-3^U@- Removed patch for #1634057k0iq Andreas Schneider <asn@redhat.com> - 4.10.17-9_:- related: #1853272 - Add back missing patch hunksp/iy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpagew.k Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tag
#k w8k Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagv7k Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg6ii Andreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requires35k} Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^?@- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-joinh4ik Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m3iu Andreas Schneider <asn@redhat.com> - 4.10.15-5^@- resolves: #1831986 - Fix gencache for normal users
x 0 x 3<k} Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^?@- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-joinh;ik Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16k:iq Andreas Schneider <asn@redhat.com> - 4.10.17-9_:- related: #1853272 - Add back missing patch hunksp9iy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage
< < kAiq Andreas Schneider <asn@redhat.com> - 4.10.17-9_:- related: #1853272 - Add back missing patch hunksp@iy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpagew?k Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagv>k Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg=ii Andreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requires
^ tgC ^ vHk Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCgGii Andreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requires3Fk} Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^?@- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-joinhEik Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16Dk Andreas Schneider <asn@redhat.com> - 4.10.17-13`@- related: #1876839 - Fix double crash when requesting share mode lockCk Andreas Schneider <asn@redhat.com> - 4.10.17-11`@- resolves: #1876839 - Fix double crash when requesting share mode lockBk% Andreas Schneider <asn@redhat.com> - 4.10.17-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issues
! Lk% Andreas Schneider <asn@redhat.com> - 4.10.17-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issueskKiq Andreas Schneider <asn@redhat.com> - 4.10.17-9_:- related: #1853272 - Add back missing patch hunkspJiy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpagewIk Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tag
y wQk Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagvPk Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCgOii Andreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM RequiresNk Andreas Schneider <asn@redhat.com> - 4.10.17-13`@- related: #1876839 - Fix double crash when requesting share mode lockMk Andreas Schneider <asn@redhat.com> - 4.10.17-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock
e r+V: e Do
56f09419cecb436d408500ec34950196ee1969ca1d67a1140bc4453bdc7db16dDn
5b8e30bc61877d67eb0781546eda037e3125af2d61226ff947eae46d951dea87Dm
83d237d121542e1a8974ca5404efc06ebabca5aa5ab1f7f036ed16f3396c2445Dl
2ed0b9cb14b8c09ea2a369592a8ae716f4f5a0d7a288dbb4a4fa9e6089e40760Dk
76499affa56e11ce8cb0b60296dc990f3d6d2f235f5edeb8261ed147ff7a3323Dj
1d90c0cbed34ba8bd0787832d1c7deb1024fe2c25a4f9accea2b95c7fa1c152aDi
3ba1c872bc9e60330b7b4b28cf7a36bdd1618d3c55d034ccc2f1b537590a34b8Dh
f7faa6dc9e93209b28d0cf6a0ef6f0697ece6387cbb402f2554016b1db3192a5Dg
ad24252031ea8c0e12e7acf23ebf80586b5162f12ce5e4eac8273966928e89d0Df
36410412b59ca22b5708b34c6f8dafdb38024efff345c20c4dc28c75a7eb8a0aDe
b3350c79767fa9a0a0ac49e9e26cb2d6f221c594bddb72ca5a870a8d7661e0f1Dd
8c78bd9be20532927c0a937e33b0befaa0f49afcab1f09654f5004054cf179b0Dc
b57c33a0b61dc0b3c7c8b1c2fc69d8106f19978caed12eb3547f80ac41328a7a
Uk Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lockTk% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issueskSiq Andreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunkspRiy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage
z 9 w[k Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagvZk Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCgYii Andreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM RequirescXk_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pWkw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting servicesVk Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock
_k Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock^k% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk]iq Andreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunksp\iy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage
z wck Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagcbk_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pakw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services`k Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock
gk Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lockfk% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issueskeiq Andreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunkspdiy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage
P z I P wmk Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagzlk Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server rolePkk7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlcjk_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pikw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting serviceshk Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock
qk Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lockpk% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issueskoiq Andreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunkspniy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage
z I zvk Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server rolePuk7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlctk_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pskw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting servicesrk Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock
zk Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lockyk% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issueskxiq Andreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunkspwiy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage
z I zk Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server roleP~k7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc}k_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254p|kw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services{k Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock
k% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issueskiq Andreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunkspiy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage{ k
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142
D y D z k Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server rolePk7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlck_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pkw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting servicesk Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lockk Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock
~ k Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock
k Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock k% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk iq Andreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunks{
k
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142
Q Q Q {k
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142zk Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server rolePk7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlck_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pkw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services
I FK> I pkw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting servicesk Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lockk Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lockk% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issueskiq Andreas Schneider <asn@redhat.com> - 4.10.16-9_:- related: #1853272 - Add back missing patch hunks5k Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict
FF 5 k Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict{ k
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142z k Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server rolePk7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlck_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254
6 tgr 6 P$k7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc#k_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254p"kw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services!k Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock k Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock k% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issues
@ S @ *k Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock)k% Andreas Schneider <asn@redhat.com> - 4.10.16-10_- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesq(k{ Andreas Schneider <asn@redhat.com> - 4.10.16-20c
- resolves: #2119058 - Fix possible segfault in winbind5'k Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict{&k
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142z%k Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server role
z I z/k Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server roleP.k7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc-k_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254p,kw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services+k Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lock
V FK V p4kw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services3k Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lockq2k{ Andreas Schneider <asn@redhat.com> - 4.10.16-20c
- resolves: #2119058 - Fix possible segfault in winbind51k Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict{0k
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142
FF q:k{ Andreas Schneider <asn@redhat.com> - 4.10.16-20c
- resolves: #2119058 - Fix possible segfault in winbind59k Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict{8k
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142z7k Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server roleP6k7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc5k_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254
d 9 d P@k7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc?k_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254p>kw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services=k Andreas Schneider <asn@redhat.com> - 4.10.16-13`@- related: #1876839 - Fix double crash when requesting share mode lockz<k Andreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023c;k_ Andreas Schneider <asn@redhat.com> - 4.10.16-23c@- resolves: #2154364 - Fix CVE-2022-38023 bR ' RY`gnu| $+29@GNU\cjqx '.5<CJQX_fmt{ &\ &b &g &l &r &x &~ & &
& & &Á &ā% &Ł- &Ɓ2 &ǁ8 &ȁ< &ɁA &ʁH &ˁL &́Q &U &ρ[ &Ё_ &сc &ҁg &Ӂm &ԁq &Ձv &ցz &ׁ & &ف &ځ &ہ &܁ &݁ &ށ$ &߁* &/ &4 &: &@ &F &K &R &X &_ &e &m &u &z & & & & & &! &) &1 &7 &: &= &D &G &N &Q &X '[ 'b 'e 'h 'k 'l 'm 'n ' q '
t ' u ' v '
w 'z '} '~ ' ' ' ' ' ' ' ' ' ' ' ' ' '
n S n zFk Andreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023cEk_ Andreas Schneider <asn@redhat.com> - 4.10.16-23c@- resolves: #2154364 - Fix CVE-2022-38023qDk{ Andreas Schneider <asn@redhat.com> - 4.10.16-20c
- resolves: #2119058 - Fix possible segfault in winbind5Ck Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict{Bk
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142zAk Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server role
Q Q Q {Kk
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142zJk Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server rolePIk7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlcHk_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pGkw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting services
Fjv cRk_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`@- resolves: #1949444 - Fix CVE-2021-20254pQkw Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
restarting servicesrPk} Andreas Schneider <asn@redhat.com> - 4.10.16-25d@- resolves: #2222250 - Fix netlogon capabilities level 2zOk Andreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023cNk_ Andreas Schneider <asn@redhat.com> - 4.10.16-23c@- resolves: #2154364 - Fix CVE-2022-38023qMk{ Andreas Schneider <asn@redhat.com> - 4.10.16-20c
- resolves: #2119058 - Fix possible segfault in winbind5Lk Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict
e r+V: e D|
ba22fffa8b12afc9653dd3d202c1f25ea68005dc24e14085ecfbecab982605c8D{
2f2fef32bd829834efcff997a91ea78ebad9913aec9b94421efa69579be8f39cDz
6085603dfc592d80718a8fb07a369da5c47fe019535a490c02e8e0eeac89b9c2Dy
4d2980f737ca5c15f4f33e1a43a82d6b00ca06a5c6d284643ea2f0b2e7928f76Dx
c18739f0ff30069eb1e908fc713e8ef1e7fa3a75c981a8b45cd1383597e8a1e9Dw
7e6cf4cf5a25112c185e8d9c2750ce650787af37ded646d8d3923984a1868673Dv
1b3f8f389416ac835d75a09fd6027e44daad1e8447c349cac349b674506ce80fDu
d161a8ffe0e1f9856548b6a48619295b25351949a76f0c3447034360be168304Dt
126e1f4ba7b91116dc2de61216743f423ed250ef44140f20c97de01055c2374aDs
1aa4d5a6ea319219e3813cc9caf102cd6341fa2aebfa9e4b9096e4e1df7854d2Dr
a4f8b4717015fbf8177d95a8a84a98b233c1bb9171ffa261d3b9bfff69345e5dDq
bc009c7bfbbc8f4c90f5bb2715b2f88462acdb617db354d01214ce91bf2aab13Dp
bd0d1c4bba8882d3e5bbeb0d58b3e9677c33d9fcf22226207d7f43f0540af0d3
+ ~ cXk_ Andreas Schneider <asn@redhat.com> - 4.10.16-23c@- resolves: #2154364 - Fix CVE-2022-38023qWk{ Andreas Schneider <asn@redhat.com> - 4.10.16-20c
- resolves: #2119058 - Fix possible segfault in winbind5Vk Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
mapping for uid/gid conflict{Uk
Andreas Schneider <asn@redhat.com> - 4.10.16-18a@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142zTk Andreas Schneider <asn@redhat.com> - 4.10.16-17aK- related: #2019673 - Add missing checks for IPA DC server rolePSk7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a@- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl
Z 8 Z m_iu Andreas Schneider <asn@redhat.com> - 4.10.15-5^@- resolves: #1831986 - Fix gencache for normal usersi^im Andreas Schneider <asn@redhat.com> - 4.10.15-4^@- resolves: #1813017 - Fix smbclient log to fileU]iE Andreas Schneider <asn@redhat.com> - 4.10.15-3^U@- Removed patch for #1634057|\k Isaac Boukris <iboukris@redhat.com> - 4.10.15-2^- resolves: #1825505 - Compilation of samba sources fails on RHELv[i Andreas Schneider <asn@redhat.com> - 4.10.15-1^- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directoriesrZk} Andreas Schneider <asn@redhat.com> - 4.10.16-25d@- resolves: #2222250 - Fix netlogon capabilities level 2zYk Andreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023
q| vei Andreas Schneider <asn@redhat.com> - 4.10.15-1^- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directorieswdk Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagvck Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCgbii Andreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requires3ak} Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^?@- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-joinh`ik Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16
@ 'I% @ vmk Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCglii Andreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requires3kk} Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^?@- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-joinhjik Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16miiu Andreas Schneider <asn@redhat.com> - 4.10.15-5^@- resolves: #1831986 - Fix gencache for normal usersihim Andreas Schneider <asn@redhat.com> - 4.10.15-4^@- resolves: #1813017 - Fix smbclient log to fileUgiE Andreas Schneider <asn@redhat.com> - 4.10.15-3^U@- Removed patch for #1634057|fk Isaac Boukris <iboukris@redhat.com> - 4.10.15-2^- resolves: #1825505 - Compilation of samba sources fails on RHEL
E ,N* E vuk Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCgtii Andreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requires3sk} Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^?@- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-joinhrik Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16mqiu Andreas Schneider <asn@redhat.com> - 4.10.15-5^@- resolves: #1831986 - Fix gencache for normal usersipim Andreas Schneider <asn@redhat.com> - 4.10.15-4^@- resolves: #1813017 - Fix smbclient log to fileUoiE Andreas Schneider <asn@redhat.com> - 4.10.15-3^U@- Removed patch for #1634057wnk Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tag
[ ! [ izim Andreas Schneider <asn@redhat.com> - 4.10.15-4^@- resolves: #1813017 - Fix smbclient log to fileUyiE Andreas Schneider <asn@redhat.com> - 4.10.15-3^U@- Removed patch for #1634057kxiq Andreas Schneider <asn@redhat.com> - 4.10.17-9_:- related: #1853272 - Add back missing patch hunkspwiy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpagewvk Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tag
#k w k Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_- related: #1852812 - trigger a rebuild to get the right tagvk Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg~ii Andreas Schneider <asn@redhat.com> - 4.10-16-5^א- related: #1785121 - Add missing RPM Requires3}k} Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^?@- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-joinh|ik Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m{iu Andreas Schneider <asn@redhat.com> - 4.10.15-5^@- resolves: #1831986 - Fix gencache for normal users
d d Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-5Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-4P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildkiq Andreas Schneider <asn@redhat.com> - 4.10.17-9_:- related: #1853272 - Add back missing patch hunkspiy Andreas Schneider <asn@redhat.com> - 4.10.16-8_- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage
* .g * ' s] Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12.1aF- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024) o+ Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12^h- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)
oG Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-11])- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577) m Peter Robinson <pbrobinson@redhat.com> 1.0.25-10S- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)M_? Daniel Mach <dmach@redhat.com> - 1.0.25-9RU- Mass rebuild 2014-01-24M_? Daniel Mach <dmach@redhat.com> - 1.0.25-8Rk- Mass rebuild 2013-12-27lmo Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-7Q@- fix support for aarch64, another part (#969831)^mS Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-6QR@- fix support for aarch64 (#925887)
/ dfT / oG Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-11])- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577)m Peter Robinson <pbrobinson@redhat.com> 1.0.25-10S- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)M_? Daniel Mach <dmach@redhat.com> - 1.0.25-9RU- Mass rebuild 2014-01-24M_? Daniel Mach <dmach@redhat.com> - 1.0.25-8Rk- Mass rebuild 2013-12-27lmo Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-7Q@- fix support for aarch64, another part (#969831)^mS Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-6QR@- fix support for aarch64 (#925887) Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-5Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-4P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
h o') h M_? Daniel Mach <dmach@redhat.com> - 1.0.25-8Rk- Mass rebuild 2013-12-27lmo Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-7Q@- fix support for aarch64, another part (#969831)^mS Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-6QR@- fix support for aarch64 (#925887) Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-5Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-4P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild's] Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12.1aF- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024) o+ Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12^h- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)
)M ! Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-4P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild' s] Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12.1aF- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024) o+ Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12^h- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086) oG Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-11])- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577) m Peter Robinson <pbrobinson@redhat.com> 1.0.25-10S- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)M _? Daniel Mach <dmach@redhat.com> - 1.0.25-9RU- Mass rebuild 2014-01-24
: dAj : )o+ Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12^h- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)(oG Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-11])- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577)'m Peter Robinson <pbrobinson@redhat.com> 1.0.25-10S- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)M&_? Daniel Mach <dmach@redhat.com> - 1.0.25-9RU- Mass rebuild 2014-01-24M%_? Daniel Mach <dmach@redhat.com> - 1.0.25-8Rk- Mass rebuild 2013-12-27l$mo Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-7Q@- fix support for aarch64, another part (#969831)^#mS Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-6QR@- fix support for aarch64 (#925887)" Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-5Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
" T J " 1m Peter Robinson <pbrobinson@redhat.com> 1.0.25-10S- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)M0_? Daniel Mach <dmach@redhat.com> - 1.0.25-9RU- Mass rebuild 2014-01-24M/_? Daniel Mach <dmach@redhat.com> - 1.0.25-8Rk- Mass rebuild 2013-12-27l.mo Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-7Q@- fix support for aarch64, another part (#969831)^-mS Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-6QR@- fix support for aarch64 (#925887), Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-5Q - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild+ Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-4P- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild'*s] Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12.1aF- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)
a$ 7]- Kamil Dudka <kdudka@redhat.com> 1.4.3-10UlI@- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)/6[ Kamil Dudka <kdudka@redhat.com> 1.4.3-9UH- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)L5]? Daniel Mach <dmach@redhat.com> - 1.4.3-8RU- Mass rebuild 2014-01-24'4s] Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12.1aF- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024) 3o+ Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12^h- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)2oG Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-11])- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577)
z ~z N:[E Kamil Dudka <kdudka@redhat.com> 1.8.0-1[H- rebase to 1.8.0 (#1592784)-9] Kamil Dudka <kdudka@redhat.com> 1.4.3-12YA@- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)~8]! Kamil Dudka <kdudka@redhat.com> 1.4.3-11V- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)
8 8 x=_ Kamil Dudka <kdudka@redhat.com> - 1.8.0-4]{@- fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498)e<[s Kamil Dudka <kdudka@redhat.com> 1.8.0-3\+@- sanitize public header file (detected by rpmdiff)^;[c Kamil Dudka <kdudka@redhat.com>